Account data: a username and a hashed password. Email is optional.
Content you create: comic prompts, panel descriptions, captions, generated images, comments, votes, and reports.
Session data: a session token cookie (HTTP-only, expires within 30 days) stored in your browser.
Analytics: only after you opt in, we record anonymized page-view data via Cloudflare Web Analytics (static.cloudflareinsights.com). It is cookieless and does no fingerprinting or cross-site tracking.
We do not log your IP address or user agent in our application logs.
2. Third-party processors
Your prompts are sent to AI providers when you generate text or images. Each provider has its own privacy policy:
Pollinations (image and text generation)
Google Gemini (text and image generation)
OpenAI (text and image generation when configured)
xAI Grok (image generation when configured)
Portkey (multi-provider gateway when configured)
MongoDB host (stores your account, comments, votes, reports)
Cloudflare Web Analytics (anonymous, cookieless analytics, only if you've consented)
Bunny Fonts (fonts.bunny.net) — privacy-friendly font CDN; no logging, no cookies
3. Data retention
Stories and images remain until you delete them or your account is deleted.
Sessions expire after 30 days of inactivity (90-day hard cap).
Reports are retained for 1 year for moderation purposes.
Server logs are retained for 30 days; we redact prompt content from logs.
4. Your rights (GDPR)
You can:
Access / Export: download all data we hold about you via GET /api/account/export (logged in).
Erase: delete your account and all associated data via DELETE /api/account.
Correct: edit your username, email, and password in account settings.
Object / Withdraw consent: change or revoke analytics consent anytime with the cookie-settings button in section 5 below.
For other concerns, contact the site administrator.