Privacy Policy and Legal Notice

01 Scope and controller

Comix Downloader is a browser extension published by N3uralCreativity (the Developer, we, or us). Comix Downloader Plus is an optional account, billing, and encrypted synchronization service for that extension. This policy applies to both. It does not apply to comix.to, comix.ws, image delivery networks, a library server you configure, browser stores, Stripe, Link, Resend, or Cloudflare under their own policies.

Comix Downloader and Plus are independent projects and are not affiliated with, endorsed by, or sponsored by comix.to or comix.ws.

02 Free extension data

Stored locally

The free extension can store settings, per-series presets, download markers, watched series, resume positions, reading statistics, technical logs, running-download checkpoints, notice state, and review-prompt state in browser local storage. Push-to-library credentials also remain local and are excluded from settings exports.

Processed for requested functions

When you request a download, the extension reads public title and chapter information, opens chapter pages, fetches images, builds archives, and hands files to the browser download manager. When enabled, it can contact comix.to or comix.ws to check watched series or contact a library endpoint you configured to upload a finished CBZ.

What free mode does not do

• The current public extension has no Plus account flow and makes no Plus API request.
• No advertising, behavioral analytics, fingerprinting, or sale of data is used.
• Downloaded images, ZIP files, CBZ files, local logs, cookies, CAPTCHA information, and library credentials are never sent to Plus.

03 Anonymous community service

The profile tenure badge, community chapter flags, and remote notices use a separate open-source Cloudflare Worker. It receives one-way hashes derived from public Comix identifiers, coarse flag counters, and the extension version needed to select a notice. It does not receive an email, readable user ID, title name, reading record, or downloaded content.

Cloudflare necessarily handles network information such as an IP address while delivering a request. The application does not intentionally store those addresses for community features.

04 Planned Plus account and service data

When Plus launches, it will remain off until you explicitly start setup and grant the requested permission. The planned setup and operation can process:

Email address

Used for six-digit verification codes, account identification, one pre-renewal trial reminder, payment failures, receipts, security notices, and deletion warnings. It is not added to a marketing list.

Authentication records

Hashed verification codes, opaque session-token hashes, expiry times, and revocation state. Raw tokens are returned to and stored by the extension, not stored in readable form in the service database.

Device records

An opaque random device ID, a name such as browser/platform, public ECDH key, approval state, and last-seen timestamp. Up to five active devices are supported.

Entitlement records

Trial, active, grace, cancellation, expiry, renewal dates, and Stripe customer/subscription identifiers. We do not receive full payment card details.

Operational records

Opaque request IDs, error codes, API timing, ciphertext size, schema version, revision number, and timestamps used for security and service reliability. Logs must not include email, tokens, title names, reading records, or ciphertext.

Rate-limit records

A keyed hash derived from the requesting IP address and time-window counters, retained briefly to prevent verification-code abuse. It is not used for tracking or advertising.

05 End-to-end encrypted synchronization

You choose each category. All categories are unchecked until you select them. Eligible categories are settings and presets, watched series, reading progress and resume positions, downloaded-chapter markers, and reading statistics.

The extension serializes the selected data and encrypts it locally with AES-256-GCM. The service receives only the encrypted envelope and limited metadata: opaque account/device identifiers, revision, schema version, size, and timestamps. It stores ciphertext in Cloudflare R2 and metadata in D1. The service does not receive the unwrapped data-encryption key.

The recovery code wraps the encryption key. Existing devices transfer that key to a new device using ECDH. Losing all approved devices and the recovery code makes cloud data unreadable; the only recovery is to verify the account email again and reset cloud sync. That reset never deletes local extension data.

Plus never synchronizes activity logs, active downloads, images, ZIP/CBZ files, library credentials, authentication cookies, notices, review state, or CAPTCHA information.

06 Billing and transactional email

Stripe Managed Payments provides checkout for the 30-day card-backed trial and US$1.50 monthly subscription, with Link acting as merchant of record. Stripe and Link handle payment methods, applicable indirect taxes, invoices, renewals, refunds, transaction support, and legally required records. Plus receives only the identifiers and subscription state needed to grant access.

Stripe and Link deliver receipts and subscription-related messages, including the trial-ending reminder. Resend delivers account verification, security, and deletion-related service emails from plus@n3uralcreativity.top. Plus does not use newsletters, abandoned-cart campaigns, or promotional email.

A one-way email hash and Stripe customer ID may remain after account deletion solely to enforce one trial per verified account/customer and prevent repeated-trial abuse. This record is not used to contact, profile, or advertise to you.

07 Browser permissions

storage

Stores local extension settings and download state.

downloads

Saves requested archives through the normal browser download manager.

tabs and scripting

Open temporary chapter tabs and extract the images needed for requested downloads.

alarms

Schedules update checks and watched-series checks while the browser runs.

notifications

Shows watched-series and extension service notifications selected by the user.

contextMenus

Adds download commands to comix.to and comix.ws context menus.

declarativeNetRequestWithHostAccess

Applies static header rules only to extension-originated requests for known Comix image hosts.

Comix sites and image hosts

Fetches title pages, chapters, covers, and page images from comix.to and comix.ws.

Community Worker

Contacts the exact anonymous community/notices Worker origin.

Planned optional Plus API origin

Not requested by the current public build. A future Plus-enabled release will request the exact API origin only during user-initiated setup. Firefox will also ask for the applicable optional data-collection consent.

Optional library server

Requested on demand for an endpoint the user enters for Push-to-library.

08 Retention and deletion

• Verification codes expire after 10 minutes, allow five attempts, and are removed after expiry cleanup.
• Access tokens expire after 15 minutes; rotating refresh sessions expire after 30 days or on logout/revocation.
• The latest encrypted state and one daily restore point are retained for 30 days. A limited number of Before restore points are also retained within that period.
• Cancellation keeps Plus active through the paid or trial period. Failed payments receive a seven-day service grace period.
• Expired accounts are read-only for 90 days, then encrypted snapshots and sync metadata are deleted.
• Delete cloud data removes snapshots but leaves the account. Reset cloud encryption removes snapshots and wrapped key data while preserving local data.
• Delete account revokes sessions and devices, deletes synchronized data, and requests billing cancellation. Stripe and Link retain records required by law; the one-trial anti-abuse record described in Section 6 remains.

09 Security

Controls include HTTPS, local authenticated encryption, opaque random identifiers, hashed tokens and codes, short access-token lifetime, rotating refresh tokens, verification attempt limits, per-email and per-IP rate limits, webhook HMAC verification, idempotent webhook processing, five-device enforcement, encrypted restore points, and deletion controls.

The encryption key and private device key are stored in browser local storage so the extension can synchronize without asking for the recovery code every time. Anyone who fully controls your browser profile may be able to access them. No electronic system is absolutely secure.

10 Providers and international processing

Cloudflare provides Worker execution, D1 database storage, R2 object storage, and network security. Resend delivers service email. Stripe Managed Payments provides checkout, and Link acts as merchant of record. Browser stores distribute packages. These providers may process data in countries outside your own under their terms, data-processing agreements, and legally recognized transfer mechanisms.

We do not sell personal data, share it for cross-context behavioral advertising, or use it to determine creditworthiness.

11 Your privacy rights

Depending on your jurisdiction, you may have rights of access, correction, deletion, restriction, objection, and portability. Plus settings provide account status, export, cloud deletion, device revocation, sign-out, and account deletion. Contact us for another request and provide the verified account email through a private channel so the account can be located.

EU/UK processing bases include performance of the Plus contract for account, sync, and billing functions; consent for optional categories and permissions; legitimate interests for security, abuse prevention, and minimal community features; and legal obligations for billing records. You may complain to your local data-protection authority.

12 Browser-store disclosures

Current public release

Free use requires no Plus account, Plus host permission, or Plus data-collection consent. Data is not used for advertising, unrelated profiling, lending, or sale.

Future Plus-enabled release

Store disclosures and Firefox optional data-collection declarations will be updated before Plus becomes publicly available. The exact Plus API host permission and applicable consent categories will be requested only during user-initiated setup.

13 Children

The extension is a general utility and is not directed to children. Plus requires the legal capacity to enter a paid subscription or authorization from a parent/guardian where applicable. We do not knowingly create Plus accounts for children who cannot lawfully consent. Third-party comic content may be unsuitable for minors and remains the responsibility of the site and the user or guardian.

14 Legal notice and acceptable use

The extension is a neutral tool and does not host or distribute comic content. Users are responsible for complying with copyright law, local law, and third-party site terms, and should download only content they are legally entitled to copy.

No legal advice. The extension and Plus are provided "as is" and "as available" to the maximum extent permitted by law. Nothing in this policy limits mandatory consumer rights. Plus-specific billing and service terms are in the Terms of Service and Refund Policy.

15 Changes to this policy

We may update this policy for product, security, provider, or legal changes. The updated date will change, and material changes may be highlighted in release notes or a service notice. New synchronization categories will remain opt-in.

16 Contact

Developer: N3uralCreativity, France. General support is available through GitHub issues. Do not post an email address, payment detail, access token, recovery code, or synchronized data in a public issue. Ask for a private contact channel for privacy or billing matters.