Privacy Policy

01 Who this policy covers

This policy explains how Cyber Comics Alliance ("CCA", "we", "us") handles personal information when you use cybercomics.org, the installable app (PWA), and the features within it — including OtakuRun & MovieVault streaming, manga reading, Oryx AI, the Forge fitness tools, lessons, the social features (profiles, parties, guilds, messages, voice/video calls), the creative studios, games, and the Nova membership. It applies whether you're a registered member or a signed-out visitor. It does not cover third-party sites or apps we link to, which have their own policies.

02 What we collect

You don't have to provide most of this — but some features won't work without the data they depend on (for example, calls need microphone access, and Nova needs a payment method).

03 How & why we use it

We use your information to:

• Run your account, profile, progression, social graph, and the features you use.
• Deliver, sync, and improve streaming, reading, lessons, games, the studios, and the Forge.
• Personalize your experience — recommendations ("More like this"), your home page, continue-watching, and quests. You can limit personalization.
• Send notifications you've opted into (in-app and web push) and service messages about your account or Nova.
• Keep the platform safe — spam prevention, abuse and fraud detection, content moderation, age-gating of mature features, and enforcing our Terms.
• Process payments and manage Nova memberships.
• Diagnose problems, monitor reliability, and improve features using aggregated or de-identified analytics.
• Comply with legal obligations and protect our rights and the community.

Legal bases (EEA/UK). Where data-protection law applies, we rely on: contract (to provide the service you signed up for), legitimate interests (to secure, maintain, and improve CCA), consent (for things like push notifications, optional cookies, and camera/mic access — which you can withdraw), and legal obligation where required. We don't use your data to build advertising profiles.

04 Camera, microphone & calls

Voice and video calls, and any record/capture features in the studios, ask your browser for microphone and/or camera permission. Nothing is captured until you grant it, and you can revoke it any time in your browser or device settings.

• Calls connect peer-to-peer (WebRTC) where possible. To set this up, your device and your call partner's device exchange network information, which means your IP address may be visible to the person you're calling.
• When a direct connection isn't possible, audio/video is relayed through our TURN relay server so the call can still connect. We don't record call audio or video; the relay only passes the live stream through.
• Call metadata (who called whom, and when) may be logged to deliver and troubleshoot the feature.

05 AI features (Oryx & automated processing)

CCA uses AI to power Oryx (our assistant), image/cover generation, lesson grading and feedback, vision comparisons for the Progress Cam, and similar helpers. When you use these, the relevant content — your prompt, message, submitted work, or image — is sent to the AI provider that fulfils the request so it can generate a response. Providers we currently use include:

• Anthropic (Claude) — powers Oryx and several assistant features.
• Google (Gemini) — used for certain generation tasks.
• Pollinations — a free fallback for text and image generation.

We send only what's needed to perform the task. We do not sell this content, and we don't use your private content to train our own models. AI providers process it under their own terms; our enterprise/API use of Anthropic and Google is not used by them to train their models, while the free Pollinations fallback is a public service — so avoid putting sensitive personal information into AI features.

Automated decisions. Some features act automatically — for example, lesson submissions can be graded by AI (which can affect XP, including detection of AI-generated writing), and content can be automatically screened for safety. These don't have legal or similarly significant effects, but if you think an automated outcome is wrong you can contact us for a human review.

06 Health, fitness & body data

The Forge workout tools are optional. If you use them, we store the workout logs and body/onboarding details you enter so we can plan progressive sessions and track your streak and XP.

The Progress Cam lets you upload private physique photos to track changes over time. These photos are stored in a private area tied to your account and are not shown on your profile or to other members. To generate the comparison and feedback you ask for, a photo may be sent to our AI vision provider (see §5) for analysis. This is sensitive information — it's entirely opt-in, you choose what to upload, and you can delete your Progress Cam photos at any time.

07 Mature content

Some areas of CCA contain mature or adult-oriented material and are gated by age and/or access controls. If you access these areas, your related activity (such as viewing and favorites history) is stored to power features like continue-watching and your lists, the same way it is for the rest of the site. You can clear this history where the feature provides that option, and deleting your account removes it.

08 What others can see

CCA is a community, so some information is visible to other people by design:

• Your handle, nickname, avatar, profile, level, and public activity (posts, comments, art, leaderboard standing, party membership) are visible to other members — some may be visible to signed-out visitors and indexed by search engines.
• Things you share into shared spaces (parties, guilds, group chats, comments, danmaku) are visible to others in those spaces.

You control much of this in Settings (visibility and interaction options). Remember that other members may still copy or screenshot what you share.

09 Cookies & local storage

We use a small set of cookies and browser storage. There are no third-party advertising cookies. The main ones:

• Session cookie — keeps you logged in. Strictly necessary.
• Privacy & consent (cca-privacy, cookie-consent choices) — remembers the opt-outs and cookie choices you set.
• Language (googtrans / cca-lang) — remembers your chosen display language for the translation widget.
• Preferences (local storage) — data-saver, reduce-motion, view modes, draft content, offline downloads, and cached identity so pages load faster.

Embedded third-party players and widgets (for example streaming sources or the translation widget) may set their own cookies or see your IP when they load. You can manage non-essential categories on the Cookie Consent Tool.

10 Who we share with

We share data only with the service providers that make CCA work, and only as needed for the feature you're using:

• Stripe — payment processing and billing for Nova.
• Hosting, infrastructure & CDN — our server host and Cloudflare (including R2 storage and the TURN relay) to run the site and serve/store media.
• AI providers — Anthropic, Google, and Pollinations, for the AI features described in §5.
• Google Translate — only if you enable site translation.
• Push delivery — your browser/OS push service (e.g. Google, Apple, Mozilla), only if you opt in to notifications.
• Content & metadata providers — services such as TMDB, AniList, and the streaming/media sources we draw from to populate catalogs and play media. Loading their content may expose your IP to them.

We may also disclose information to comply with the law, respond to lawful requests, enforce our Terms, or protect the safety, rights, and property of our members and CCA. If CCA is ever involved in a merger or transfer, data may pass to the successor under this policy.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

11 International data transfers

CCA and several of our service providers operate in different countries, so your information may be processed outside the country where you live, including in the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers. By using CCA you understand your data may be processed in these locations.

12 How long we keep it

We keep your account data while your account is active and as needed to provide the service. When you delete your account we remove your personal data, with some exceptions:

• Content shared into the community (e.g. posts or messages others received) may persist where deletion isn't technically practical or would break others' experience.
• Limited information may be retained where we must for legal, security, fraud-prevention, or dispute-resolution reasons.
• Routine encrypted backups roll off on a limited cycle.
• Downloaded/offline media and temporary processing files expire automatically (for example, generated episode downloads expire within about 24 hours).

13 Your rights & choices

Depending on where you live, you may have the right to access, correct, export (port), or delete your personal data, to object to or restrict certain processing, and to withdraw consent. If you're in the EEA/UK you have these GDPR rights and may lodge a complaint with your local supervisory authority. If you're a California (or other US state) resident, you have the right to know, delete, correct, and opt out of "sale"/"sharing" — which we don't do — and we won't discriminate against you for exercising any right. You can:

• Edit most of your data directly in Settings.
• Use Your Privacy Choices to set opt-outs (including "do not sell/share" and limit personalization) and to request export or deletion.
• Manage cookies on the Cookie Consent Tool and notifications/permissions in your browser.
• Contact us at [email protected] for anything else.

We'll verify requests against your account and respond within the timeframe required by applicable law. You may use an authorized agent where the law allows.

14 Security

Passwords are stored hashed, traffic is served over HTTPS, payment card data is handled entirely by Stripe, secrets and private uploads are access-restricted, and access to systems is limited. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data and will notify affected members of a serious breach where required by law.

15 Children

CCA isn't directed at children under 13 (or the minimum age in your country), and mature areas require you to be of the relevant adult age. We don't knowingly collect data from children below the applicable age without proper consent; if we learn we have, we'll delete it. Parents or guardians who believe a child has given us data can contact us at [email protected].

16 Do Not Track & Global Privacy Control

Because we don't track you across other sites for advertising, there's no cross-site behavior to disable. We honor recognized opt-out signals such as Global Privacy Control (GPC) as a "do not sell/share" request where applicable. Browsers also send a "Do Not Track" signal that has no industry-standard meaning; our no-ad-tracking practices apply to everyone regardless.

17 Changes to this policy

We'll update the date above when this policy changes and flag material updates in-app where appropriate. Continuing to use CCA after an update means you accept the revised policy.

18 Contact

Privacy questions or requests? Email [email protected]. For data export or deletion, the quickest route is Your Privacy Choices.