Privacy Policy

1. Scope and who we are

This Privacy Policy applies to manhwawebtoonread.com and the Reader Lite reading service operated under the name Manhwa Webtoon Read ("Manhwa Webtoon Read," "we," "us," or "our"). It covers the public site, reader, library features, account session, and comments.

Reader Lite uses ToonSocial as its identity provider. ToonSocial may have separate privacy terms for the account information it controls.

2. Information we handle

Account and profile information

When you register, sign in, verify an email address, reset a password, or complete a profile, the submitted credentials are sent securely to ToonSocial Identity. Reader Lite does not store your password in its own database. To operate your session, Reader Lite receives limited account claims such as your ToonSocial user ID, email address, username, display name, avatar URL, role flags, profile-completion status, and session expiration time.

Comments and community activity

If you post a comment or reply, we store the comment text, your ToonSocial user ID, the related chapter, timestamps, reply relationships, moderation state, and anti-spam signals. Your display name and avatar may be fetched from ToonSocial and shown with approved comments. Reply notifications may include a short preview and a link to the relevant chapter.

Technical and security information

Our servers and infrastructure providers process normal request data, which may include IP address, user-agent, request time, requested URL, response status, and security events. Where trusted proxy headers are enabled, Reader Lite uses the client IP for abuse prevention and rate limiting. Rate-limit keys are stored as keyed hashes rather than raw IP addresses.

Information stored in your browser

Reader Lite uses browser storage for features that do not require a server-side user profile. This may include your language and theme, cached interface dictionaries, bookmarks, reading progress, series ratings, notification toggles, original-image preference, and cross-tab session synchronization. This information normally remains on your device and can be removed through your browser controls.

3. Cookies and similar technologies

• Authentication cookies: secure, HttpOnly cookies are used to maintain a signed-in session and protect account flows. Reader Lite sessions are limited to no more than one hour and may end sooner when the underlying identity grant expires.
• Language preference: the reader_localecookie remembers a language selection for up to one year. It does not create a separate indexed URL.
• Local storage: the browser-only preferences listed above remain until you clear them or the application replaces them.
• Google Analytics cookies: when a valid measurement ID is configured, Google Analytics may set first-party cookies such as _ga to distinguish users and sessions on eligible public pages.

Google Analytics

If a valid Google Analytics measurement ID is configured, Reader Lite automatically loads the Google Analytics tag on an allowlist of public reading and site-information routes. Google may process information such as the pages you view, referral information, interaction times, and device, browser, network, or approximate-location signals to provide usage reports. Reader Lite does not display an analytics consent prompt and does not send Consent Mode overrides for analytics or advertising signals. Google Analytics advertising features, if enabled, follow the settings of the applicable Google Analytics property. Reader Lite sends manual page-view events; auth, admin, API, metadata-image, malformed, and unknown routes are excluded. App-owned links into auth routes open a fresh document, and an unexpected client-side transition into an excluded route reloads the document so the public-page analytics runtime is removed. Query strings and fragments are removed from page locations, and referrers are reduced to approved queryless public paths or an external origin before they are sent by Reader Lite.

4. How we use information

• Provide pages, account sessions, comments, and reader features.
• Authenticate users through ToonSocial and keep sessions secure.
• Moderate comments, prevent spam, enforce rate limits, and investigate abuse.
• Send service-related reply notifications through ToonSocial.
• Diagnose errors, protect infrastructure, and improve reliability.
• Measure site usage and improve the reading experience.
• Comply with law and respond to valid legal requests.

Depending on your location, these activities may rely on performing a contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, or your consent where consent is required.

5. When information is shared

We may disclose limited information to:

• ToonSocial Identity, for account, profile, session, and notification functions.
• Infrastructure providers, including hosting, database, content-delivery, object-storage, email, security, and monitoring vendors that process data for us.
• Google reCAPTCHA, when comment anti-spam checks are enabled and you submit a comment.
• Google Analytics, while a valid tenant measurement ID is configured and you visit an eligible public page.
• Authorities or other parties, when reasonably necessary to comply with law, protect rights or safety, investigate misuse, or complete a business reorganization.

We do not currently sell personal information for money. No separate advertising-network script is active in this release. Google Analytics advertising features may operate according to the property settings described above.

6. Retention

We retain information only as long as reasonably necessary for the purposes described above, including security, dispute resolution, and legal compliance. Authentication sessions expire within one hour. Comment rate-limit buckets are designed to be pruned after roughly one hour. Comments and their moderation records may remain while the related content and community feature are available, unless deletion is required or appropriate. Provider logs and backups follow the relevant provider's retention schedule.

7. Your choices and rights

You can clear or block cookies and local storage through your browser, use browser privacy or content-blocking controls, stop posting comments, or sign out at any time. Depending on applicable law, you may also have rights to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent where processing is based on consent.

Send privacy requests to [email protected]. We may need to verify your identity. Requests concerning the underlying ToonSocial account may need to be completed by ToonSocial as the identity service responsible for that account data. You may also lodge a complaint with the data-protection authority available in your jurisdiction.

8. International processing and security

Service providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers. We use reasonable administrative and technical controls, but no online service can guarantee absolute security.

9. Children

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

10. Changes and contact

We may update this policy when the service or legal requirements change. The date at the top identifies the latest version. Material changes may also be announced through the site.

Privacy questions and requests: [email protected].