Privacy Policy
Clear rules for account data, creative work, AI processing, public sharing, and your choices.
Manhwa.xxx is an adults-only service. We collect the minimum information needed to run accounts and creative tools. Prompts and images may be processed by generation and captioning providers. Free-account generations are published automatically; paid creators can select automatic or manual publishing. We do not currently sell personal information or run targeted advertising.
This summary is for convenience. The complete provisions below control.1. Who we are and scope
Manhwa.xxx ("Manhwa.xxx," "we," "us," or "our") operates an adult-only AI image-generation studio, creator profiles, public artwork library, comments, collections, and related services (the "Service"). For purposes of applicable data-protection law, Manhwa.xxx is the controller of personal information collected through the Service unless a separate notice says otherwise.
This Policy covers our websites, accounts, generation and editing tools, public community features, support channels, and related online services. It does not govern third-party websites or services that have their own privacy notices.
2. Information we collect
Information you provide
- Account information: name, email address, profile picture, username, biography, links, and profile preferences.
- Creator content: prompts, negative prompts, uploaded reference or source images, generated images, editing instructions, titles, descriptions, tags, model settings, folders, bookmarks, and publishing choices.
- Community activity: follows, likes, comments, reports, moderation appeals, and other interactions.
- Transactions and support: plan, credit, billing status, transaction identifiers, tax information where required, and messages you send us. A payment processor may collect full payment-card details directly; we do not need to store them.
- Age and eligibility information: adult-status confirmation and, if legally required, the limited result of an age-assurance check.
Information collected automatically
- IP address, device and browser type, operating system, referring pages, requested URLs, timestamps, approximate region, language, crash data, and security events.
- Session cookies, local-storage records, and similar data used to keep you signed in, remember adult confirmation, and preserve local generation history, folders, profile settings, follows, bookmarks, and comments.
Information from others
We receive limited account information from Google when you choose Google sign-in, information from payment and infrastructure providers, and reports or public interactions submitted by other users.
3. Google account data
Google sign-in requests the openid, email, and profile scopes. We use the resulting account identifier, name, email address, and avatar only to authenticate you, secure your account, display your profile, and communicate about the Service. We do not use Google account data for advertising, sell it, or use it to train generative-AI models.
Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. You can revoke Manhwa.xxx access in your Google account settings, but revocation does not automatically erase records we must retain for security, legal, or transaction purposes.
4. How and why we use information
| Purpose | Examples | Legal basis where required |
|---|---|---|
| Provide the Service | Authenticate accounts; generate, edit, caption, save, organize, and publish images; manage credits and subscriptions. | Performance of our contract with you. |
| Safety and integrity | Prevent abuse, fraud, prohibited content, account compromise, scraping, and service disruption; investigate reports. | Legitimate interests; compliance with law; protection of users and the public. |
| Personalize and improve | Remember preferences, diagnose failures, measure feature performance, and improve usability. | Legitimate interests or consent where required. |
| Communicate | Service notices, security alerts, support, moderation decisions, policy changes, and marketing you can opt out of. | Contract, legitimate interests, or consent. |
| Legal and business operations | Accounting, disputes, audits, enforcement, corporate transactions, and lawful requests. | Legal obligation and legitimate interests. |
Where we rely on legitimate interests, we assess those interests against your rights. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.
5. AI processing and service providers
Generation, editing, captioning, and safety functions necessarily require processing the content you submit. Depending on the feature, prompts and images may be transmitted to Anima for generation, editing, or image-to-text analysis. Google provides OAuth sign-in only. Hosting, storage, security, email, analytics, age-assurance, and payment vendors may process limited information on our behalf when those features are enabled.
Providers process information under their own terms or our service-provider agreements. Their systems may operate outside your country. Do not submit a real person's intimate image, confidential material, biometric identifier, government identifier, financial credential, health information, or other sensitive personal data in a prompt or upload. Provider retention and model-training practices may vary; review the applicable provider notice before submitting sensitive material.
6. What is public
Free-account image generations are published automatically to Home, Explore, and the creator’s public profile. Paid creators can choose automatic posting or Manual review in Advanced Settings. Tool uploads and unfinished jobs are not public merely because they were uploaded. When content is published, its image, title, description, tags, visible prompt or settings, username, avatar, comments, engagement counts, and publication time may become visible worldwide, indexed by search engines, copied by others, and difficult to remove from third-party caches.
Never submit or publish personal information you do not want public. Deleting a post removes it from our active Service within a reasonable period, but does not control copies already made by others, search-engine caches, legal archives, or backups retained temporarily for recovery and security.
7. When we disclose information
We may disclose personal information:
- to processors and vendors that help operate the Service, subject to appropriate contractual restrictions;
- to other users and the public when you publish or interact publicly;
- to protect users, investigate abuse, enforce our Terms, prevent fraud, or address an emergency;
- when reasonably necessary to comply with law, court orders, valid legal process, or lawful government requests;
- in connection with financing, a merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections; and
- with your direction or consent.
We do not sell personal information for money. We do not currently share personal information for cross-context behavioral advertising or serve targeted advertising. If that changes, we will update this Policy and provide legally required choices before the practice begins.
8. Cookies and local storage
We use only the technologies needed for the current Service:
| Technology | Purpose | Typical duration |
|---|---|---|
manhwa_session | Secure Google-authenticated session. The cookie is HttpOnly and SameSite=Lax; it is marked Secure over HTTPS. | Until logout, expiry, or server-side invalidation. |
| Adult confirmation | Remembers that you confirmed you are an adult. | Until browser storage is cleared. |
| Creator workspace storage | Locally retains generations, prompts, folders, profile edits, follows, bookmarks, and comments. | Until you delete it or clear browser storage. |
Blocking essential storage may prevent sign-in and core features. We do not currently use advertising cookies. A browser's general “Do Not Track” signal has no uniform legal meaning; where required, we treat a recognized Global Privacy Control signal as an opt-out of sale or sharing.
9. Retention
We retain personal information only as long as reasonably necessary for the purposes described here, including to provide the Service, maintain security, resolve disputes, enforce agreements, and satisfy legal obligations. Retention depends on the data:
- Browser-local creator data remains until you delete it, clear site storage, or remove the browser profile.
- Authentication sessions remain until logout, expiration, invalidation, or a server restart in the current implementation.
- Public content remains until you delete it or it is removed, after which backup copies may persist for a limited recovery cycle.
- Security, support, moderation, billing, and legal records may be retained for the applicable limitation, tax, chargeback, fraud-prevention, or compliance period.
- Age-assurance data, if collected, will be limited to what is necessary, used only for eligibility and compliance, and deleted promptly unless law requires retention.
Third-party providers may apply their own documented retention periods.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed for the nature of the information, including limited OAuth scopes, server-side secrets, restricted access, session-cookie protections, transport encryption in production, abuse controls, and vendor review. No method of storage or transmission is completely secure. You are responsible for securing your Google account, device, browser profile, and exported files, and for notifying us promptly of suspected unauthorized access.
11. Adult-only service and age assurance
The Service is strictly for people who are at least 18 years old and have reached the age of legal majority where they live. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that an ineligible minor has used the Service, we will suspend the account and delete associated information as required by law.
We may use age gates or privacy-preserving age-assurance providers. Any age-assurance information will be separated where practical, minimized, protected, and not reused for advertising, profiling, or unrelated purposes. A parent, guardian, or other person who believes a minor provided information may contact [email protected].
12. International data transfers
Manhwa.xxx and its providers may process information in Hong Kong, the United States, and other jurisdictions that may not provide the same legal protections as your home country. Where required, we use recognized safeguards such as adequacy decisions, standard contractual clauses, contractual security commitments, and transfer risk assessments. You may request information about applicable safeguards.
13. Your privacy rights
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; restrict or object to processing; withdraw consent; opt out of sale, sharing, targeted advertising, or qualifying profiling; limit certain uses of sensitive information; and appeal a denied request. You may also complain to your local data-protection authority.
California residents may additionally request categories and specific pieces of personal information, sources, purposes, and categories of recipients, and may exercise applicable rights without discrimination. We do not currently sell or share personal information as those terms are defined by California law.
To exercise a right, email [email protected]. State your country or state and the right requested. We may verify your identity and authority using information proportionate to the request. An authorized agent may submit a request where permitted, but we may require proof of authorization and direct identity confirmation. We will respond within the period required by applicable law.
14. Account deletion and choices
You can edit public profile information and delete local generations through available controls. You can clear browser-local records through your browser, revoke Google access through Google settings, unfollow creators, remove comments where controls are available, and opt out of promotional email using its unsubscribe link.
For full account deletion, email [email protected] from the account email. Deletion is subject to identity verification and limited retention for fraud prevention, disputes, legal obligations, safety, and backup cycling.
15. Automated moderation and appeals
We may use automated systems to detect prohibited prompts, uploads, generated content, spam, fraud, and other safety risks. These systems can make mistakes. When a decision has a significant account effect, you may request human review by contacting [email protected]. We do not use solely automated decisions to determine creditworthiness, employment, housing, insurance, or other similarly consequential matters.
16. Changes to this Policy
We may update this Policy as the Service, providers, or law changes. We will post the revised Policy and update the date above. If a change materially reduces your rights or expands our use of personal information, we will provide additional notice or obtain consent where required. Continued use after the effective date means the revised Policy applies, except where law requires another form of acceptance.
17. Contact
Privacy questions and requests: [email protected]
Safety and minor-related reports: [email protected]
General legal notices: [email protected]
Controller: WINNEROO LTD, a private company incorporated in Cyprus (Registration No. HE 479974), with registered office at Kalymnou 1, "Q MERITO", 4th floor, Agios Nikolaos, Kamares, 6037 Larnaca, Cyprus. Where required, we will identify an EU/UK representative or data-protection officer.