Privacy Policy
Last updated: September 2026
Draft — under review; to be finalized with legal counsel before public launch.
1. Overview
This policy explains what information Vivimanga collects, how we use it, and the choices you have. Vivimanga is an invite-only, immersive manga platform where readers compose their own experience and contributors author independent creative layers.
2. Information we collect
- Account information. An email address (used for authentication and account recovery) and authentication credentials managed by our auth system.
- Two-factor authentication. If you enable 2FA — required to hold creative roles or to comment — we store the data needed to verify your second factor.
- Creator profiles & personas. Display names and avatars for the profiles (personas) you create. These are the only identity details other users ever see.
- Reader preferences. Your per-manga crew choices (cut, script, voices, music and ambience mixes, language), reading progress, bookmarks, follows, and ratings — stored as structured preference data.
- Contributed content. Pages, cuts, scripts, voice takes, music and ambience tracks, and translations you upload or generate, along with related metadata.
- Comments. Comments you post, which are screened by automated (LLM-based) moderation.
- Technical data. Session cookies and basic request/log data needed to operate and secure the service.
3. How we use your information
- to provide the reader and creation experience and remember your choices;
- to authenticate you and keep your account secure, including 2FA;
- to compose, host, and stream the layered works you read or contribute;
- to moderate comments and enforce our content guidelines;
- to recommend content and surface trending or featured works;
- to respond to support, legal, and copyright requests.
4. Anonymity toward other users
Vivimanga is built around persona-level anonymity. Other users — readers and contributors alike — see only a persona's display name and avatar. They never see your real account, email address, or user id, and cannot link two of your profiles back to the same account. We preserve this separation in the data we expose through the product.
5. Who we share data with
These are every processor Vivimanga sends data to, and what each one receives. The list is derived from the service's own code, not from memory, and a test keeps it that way.
- Cloudflare — hosting, storage, moderation, analytics and email. The application runs on Cloudflare Workers, so it sees every request (including your IP address); uploaded media is stored in Cloudflare R2; comment text is screened by a Workers AI moderation model; invite and password-reset mail is sent through Cloudflare Email; and aggregate, pseudonymised usage events go to Cloudflare Analytics Engine.
- Turso — the database. It holds your account record, profiles, preferences and everything you contribute.
- ElevenLabs — AI voice acting. Receives the line of dialogue being voiced and the chosen voice settings.
- Fish Audio — AI narration for light novels. Receives the passage being narrated and the chosen narrator voice.
- OpenRouter — the text model behind AI-assisted writing. Receives the story text and prompts you submit to it.
- Google AI — Gemini for image generation, colouring and captioning, and Lyria for music. Receives the prompt, and the page or reference image you are working on.
- Google Cast — casting a reader to a TV. The Chromecast sender script is fetched from Google when you start a cast, or on later visits once you have cast before (so that a reload mid-cast rejoins your TV). If you have never cast, tapping the Cast control is the first time anything about you reaches Google.
- Stripe — payments, once payments are live. Receives your payment details directly (we never see a card number), the amount and reference of the tip or subscription, and the email address on your account, for the receipt.
We share personal information with these providers only as needed to operate the service, and we do not sell your personal information. None of them receives a persona's link to your account beyond what the feature you used requires.
6. Cookies & sessions
Vivimanga sets no advertising or tracking cookies, and runs no session-replay or third-party analytics script. Every cookie the service sets is functional, and every one of them is listed here:
| Cookie | Purpose | Lifetime |
|---|---|---|
better-auth.session_token | Keeps you signed in. This is the session itself. | 7 days, or until you sign out |
better-auth.session_data | A short-lived cache of your own session so most pages can render without a database read. | 5 minutes |
better-auth.two_factor | Carries a sign-in that has passed the password but not yet the second factor. | 10 minutes |
better-auth.trust_device | Set only if you tick “Trust this device”, so 2FA is not asked again here. | 30 days |
vv_session_scope | A one-bit marker that your session cookie has been moved to the right domain scope. It holds no information about you. | 7 days |
vv_appearance | Your appearance choice (light or dark face, and theme), so the first painted frame is the one you picked rather than a flash of the wrong one. | 1 year |
invite_code | Carries the invite code you entered across to the sign-up screen, including through a social sign-in redirect. | 10 minutes |
shared_link | Carries a link someone shared a work with you by, from that page to the sign-up screen, when you choose to create an account with it. Cleared once you sign up or open the link again. | 15 minutes |
On https the four better-auth. cookies carry a __Secure- prefix, and on production they are scoped to .vivimanga.com so one sign-in covers the studio too. Disabling them will prevent you from signing in; the rest only affect how the service looks and reads.
7. Data retention
We keep account and profile data for as long as your account is active. Contributed layers may persist after account closure to the extent they are already composed into other users' works, and we may retain limited records as required for security, legal, and copyright-compliance purposes. When we replace or remove stored media, the underlying objects are deleted from storage.
8. Your rights & choices
You can update your profiles and preferences in the product, and you may request access to or deletion of your personal information subject to applicable law and the retention limits above. To make a request, contact us using the details below. The specific rights available to you depend on your jurisdiction [to be finalized with legal counsel].
9. Children
Vivimanga is not directed to children, and we prohibit content that exploits minors. If you believe a minor has provided us personal information, contact us and we will take appropriate action.
10. Changes to this policy
We may update this policy as the product and our obligations evolve. Material changes will be surfaced in the product, and the “last updated” date above will change.
11. Contact
Questions about privacy? Reach us at support@vivimanga.com or via the contact page.