Privacy Policy
OneIssue operates ComicShelf, a reading and watchlist tracker. This policy describes information handled by the app and its supporting services. Features and providers operate only when configured and used in your build.
Information we handle
We handle Google sign-in profile information and a Firebase UID; the titles, progress, statuses, ratings, tags, notes and cover references you save; profile and privacy settings; goals, streaks, upcoming items, activity and follow relationships. If you use a subscription, we also handle purchase-verification records described below. Search text can reveal your reading or viewing interests.
We use this information to sign you in, store and synchronize your records, provide search/discovery, calculate statistics, support optional notifications, verify subscriptions, process deletion and protect the service. Device storage holds sessions, cached data, offline edits, settings and locally selected images. Custom avatar photos do not sync across devices.
Third-party services and data flows
Direct API and image requests reveal network/request information to their hosts. Unless stated otherwise, content lookups do not include your ComicShelf account profile or private notes. Each provider operates under its own policies.
AniList
Anime and manga searches, autocomplete, and upcoming-release discovery send search text and catalog filters directly to AniList. Loading returned artwork also contacts its image hosts. AniList can receive your IP address and request/browser information. ComicShelf does not send your Google account details, private notes, ratings, or complete shelf to this API. AniList policies
TMDB (The Movie Database)
Movie/TV/documentary search, autocomplete, metadata, upcoming discovery, episode counts, and streaming-provider lookups pass search titles, catalog filters, dates, regions and media identifiers through ComicShelf's Vercel backend to TMDB. TMDB receives those backend requests; poster and provider-logo requests go directly from your device to its image service and can expose your IP address and request information. We do not attach your account details or notes to TMDB requests. TMDB privacy
JustWatch via TMDB
TMDB's streaming-provider listings use JustWatch data. ComicShelf does not call a separate JustWatch API or send it account records. Opening a JustWatch attribution link connects your device to that site. JustWatch privacy
OMDb
OMDb supplied metadata and IMDb ratings for previously saved records. New searches and episode lookups use TMDB. Existing OMDb poster URLs may still load directly from the original image host.
MangaDex
Using chapter-count sync sends the selected manga title, its matched MangaDex identifier and language/content filters directly to MangaDex. It receives your IP address and request information. This feature retrieves metadata, not chapter pages, and does not sign you into MangaDex or upload your full reading list. MangaDex API information
Open Library (Internet Archive)
Book search and autocomplete send title/search text directly to Open Library. Cover requests include cover identifiers. Open Library and its image hosts receive your IP address and request information; ComicShelf does not attach your account details or private notes. Internet Archive policies
Google Books
Comic cover searches send title/search text and catalog filters directly to Google Books; returned thumbnails are fetched from Google image hosts. These services receive your IP address and request information. This integration does not submit your ComicShelf notes, ratings or account profile to a Google Books account. Google Books privacy
Firebase and Google Sign-In (Google)
Firebase Authentication processes Google sign-in credentials, your email/name/profile photo, account UID, sessions and related security information. ComicShelf does not receive your Google password. Cloud Firestore stores your shelf, watchlist, notes, profile, goals, streaks, social relationships, activity and subscription-verification records. Notes marked private are stored in owner-only documents; a public profile exposes the permitted public fields to signed-in users. Firebase Cloud Messaging (FCM) processes app-installation identifiers, device registration tokens and notification-delivery data when native push registration is used. Notification permission can be controlled in device settings.
Firebase App Check, when configured, uses reCAPTCHA on web or Play Integrity on Android to attest requests. Google may process app/device, browser, network and security signals. Native Play Integrity is optional and only operates in builds where it has been enabled. Custom avatar photos are device-local; Google profile photos and any previously hosted Firebase Storage avatars are retrieved from their respective hosts. Firebase privacy Google privacy
Google Play Billing
If subscriptions are offered in your Android build and you purchase or restore one, Google Play processes the purchase, Google account/payment information and subscription lifecycle. ComicShelf receives purchase identifiers/tokens and entitlement/status/expiry information, not your full card details. An obfuscated ComicShelf account identifier is supplied to associate a purchase with the correct account. Google privacy
Cloudflare Worker
Our subscription-verification service runs on Cloudflare Workers. Purchase/restore requests send a Firebase authentication token and a Google Play purchase token to this service. It verifies your account, checks the purchase with Google Play, acknowledges eligible purchases, and stores the account-to-purchase mapping and entitlement in Firestore. Scheduled verification refreshes those records. Cloudflare also processes IP addresses and request/operational metadata when handling the request. Cloudflare privacy
Vercel
Vercel hosts the web app and backend routes. It processes network/request information such as IP address, browser information, requested URLs and operational logs. The TMDB route processes catalog lookup parameters. The account-deletion route processes your Firebase authentication token and UID to remove account data through Firebase. The public Firebase-config route returns only client configuration. Vercel privacy
Public profiles, notes and external links
If you enable a public profile, signed-in users can view your profile and the permitted public shelf/watchlist fields, including notes you leave public. Notes marked private are owner-only. Legacy entries remain hidden from public readers until the app migrates them to the separated format. Activity records are owner-only under the current rules, even though older versions supported a friends feed. Follow relationships may be visible to signed-in users.
Opening a streaming, bookstore, manga or other external link sends the selected title/search text where included in that link and connects you to the destination website. Remote cover and avatar hosts receive image requests. Copies already downloaded, screenshots or exports held by someone else cannot be recalled by changing a privacy setting.
Analytics, advertising and operational records
The current app does not initialize Firebase Analytics or a separate advertising/behavioral-analytics SDK. Hosting, authentication, messaging and security providers still process their own operational, delivery and security information. We do not sell your personal information or provide your shelf/notes to advertising partners.
Subscriptions, renewals, cancellation and refunds
Optional ComicShelf Plus subscriptions may be available through Google Play in supported Android builds. Available benefits, localized price, currency, taxes, billing period and renewal terms are shown in the app and Google Play's purchase confirmation before you agree. A monthly or annual subscription is recurring, not a lifetime purchase. No free trial or introductory offer is promised by these terms.
Unless canceled, the subscription renews automatically and Google Play charges your selected payment method for the next billing period under the terms shown at checkout. Manage or cancel it before the next renewal using Google Play → Payments & subscriptions → Subscriptions → ComicShelf, or Google Play subscriptions. Cancellation ordinarily stops future renewals; access continues for the paid period while Google Play reports an eligible subscription. Holds, expiry, refunds or revocation can change access.
Uninstalling ComicShelf or deleting your ComicShelf account does not cancel your Google Play subscription. Cancel through Google Play separately. Restore purchases uses Google Play verification and requires the account associated with the purchase; deleting an account does not automatically transfer purchases to a new ComicShelf account.
Cancellation does not itself guarantee a refund. Refund eligibility depends on Google Play's refund policy, the purchase circumstances and applicable consumer rights. Submit a request through Google Play or contact us for help; these terms do not exclude rights that cannot lawfully be excluded. Google Play cancellation help
Retention and deletion
Account records remain while you use the account or until you delete them. Activity is trimmed on a best-effort basis to the most recent 100 events. You can export shelf/watchlist data, correct records and delete individual items in the app.
To request account deletion, use the app's Delete Account option or the account-deletion page. After a fresh sign-in, the backend removes user data and descendants, private notes, public indexes, owned purchase-verification records and supported stored-avatar references, then removes the Firebase Auth account. Failed cleanup can be retried. This deletes the ComicShelf account, not your Google account or Google's purchase records.
The app clears local browser storage on the device completing a successful deletion; other devices, exported files and recipients' historical copies may retain data until cleared separately. Provider logs, backups and records required for security, billing or legal obligations can follow separate provider retention schedules. We do not promise a fixed backup-purge period. Account deletion does not cancel Google Play billing.
Security and international processing
Connections use HTTPS and Firebase provides its service-level protections. Authentication, owner/public access rules and App Check where enabled help control access. Device caches are not an encrypted vault. No service can promise absolute security. Providers may process information outside your country under their applicable terms and safeguards.
Your choices and contact
You can change profile privacy, mark notes private, manage notification permissions, export or delete records, cancel subscriptions through Google Play, and contact us about access, correction or deletion requests at kyeban19@gmail.com. Android may request notification permission and file access through system pickers for import/export; this version does not implement a camera/barcode permission feature.
Children and policy changes
ComicShelf is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it. Local age and parental-consent requirements may also apply. We will update this page when practices change and provide further notice where required.