Privacy policy

Data we process

We process account identifiers supplied by Google sign-in, profile choices, membership status, reading position and verified reading activity, favorites, bookmarks, comments, moderation records, notifications, cosmetic inventory and support messages. Security logs and rate-limit counters protect the service.

Payments

Stripe processes subscription checkout, payment methods, invoices and the billing portal. SrMagnus stores the Stripe customer and subscription identifiers, the selected rank, subscription status and renewal state needed to control chapter access. Full card numbers and card security codes do not pass through or remain on SrMagnus servers.

Purposes and legal bases

Data is used to provide the requested service, protect accounts and the community, remember reading progress, enforce paid and free access rules, respond to support, prevent fraud and meet legal duties. Depending on the activity, processing relies on performance of the service agreement, legitimate interests, consent or legal obligation.

Visibility

Profiles can be made private. Reading activity, collections and profile comments have separate controls. Comments posted elsewhere remain visible until edited, deleted or moderated. Blocking hides a member’s comments from the blocker.

Providers and transfers

The public service uses Cloudflare Workers, D1 and R2 for hosting, relational data and media, Google OAuth for account sign-in, and Stripe for recurring subscription payments. Provider processing may involve international transfers protected by their applicable safeguards.

Retention

Account and reading data is retained while the account is active and for a reasonable period afterward. Security, payment, transaction and moderation records may be retained longer where necessary for accounting, claims, fraud prevention or legal obligations.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Submit a privacy request through Contact; requests are answered within the legally applicable period, normally one month. You may also complain to the Spanish Data Protection Agency or your local supervisory authority.

Children

The service is not directed to children under 14. +18 material requires an adult confirmation and is intended only for adults.