Privacy Policy & Legal Notice
This document explains how the Comix Downloader browser extension handles information, the browser permissions it uses, and the legal terms that apply to its use. Please read it carefully.
In short: Comix Downloader does not collect, transmit, sell, or share any personal information. It has no analytics and no tracking. Almost everything it does happens locally inside your own browser, and the data it stores (settings, download history, reading stats, resume positions) stays on your device. There are two exceptions: (1) the optional Push-to-library feature (off by default) uploads the comic files it builds to a server you configure — at your request, to a destination you choose, never to the Developer; and (2) the built-in community features (the profile tenure badge and community chapter flags) and the Developer's occasional notices talk to a tiny open-source service that only ever receives anonymous, one-way hashed identifiers, coarse counters, and — for notices — the extension's version number; no names, no readable ids, no titles, no reading history. Neither the Developer nor anyone else can identify you from it.
Also important: The extension is a general-purpose tool. You are solely responsible for using it lawfully and in accordance with the terms of any website you access. See the Legal Disclaimer and Acceptable Use sections below.
01 Who we are & scope
“Comix Downloader” (the “Extension”) is a free, open-source browser extension published by N3uralCreativity (the “Developer”, “we”, “us”). It adds download controls to the third-party website comix.to so that you can save comic chapters to your own device, and locally blocks the site's intrusive click ads and popups.
This Privacy Policy & Legal Notice (the “Policy”) applies to the Extension as distributed through the Chrome Web Store, the Mozilla Firefox Add-ons site (AMO), the project's GitHub repository, and any other channel where we publish it. It does not apply to comix.to or to any other website, service, or software you may use alongside the Extension.
By installing or using the Extension, you acknowledge that you have read and understood this Policy.
02 Definitions
- Personal data
- Any information relating to an identified or identifiable natural person (e.g. name, email, IP address, account identifiers).
- Local storage
- Storage provided by your browser (the
storage.localarea) that resides only on your device and is not synchronized to us. - Process
- To read, transform, or act upon data in your browser's memory at the moment of a download — without retaining or transmitting it.
- Third-party site
- Any website not operated by the Developer, including comix.to and its content-delivery networks (CDNs).
03 Information the extension handles
The Extension is designed to function with the least information possible. There are two categories:
a) Data stored locally on your device
Stored in your browser's private storage.local area. It is never sent anywhere and is readable only by the Extension on your machine:
- Your settings (
cdlSettings) — your chosen preferences (download behavior, output format, naming, appearance, etc.). These contain no personal data. - Activity log (
cdlLogs) — a short, rolling, technical log of recent download events (e.g. “ZIP saved”, “chapter failed”) shown in the popup to help you and us diagnose issues. It contains no personal data and is capped to a small number of entries. - Download history (
cdlManifest) — which chapters of which series you have already downloaded, so the extension can offer to fetch only new ones. Stored as series/chapter identifiers; no personal data. - Per-series preferences (
cdlSeriesPrefs) — optional output choices you ask the extension to remember for a given series. - Subscriptions (
cdlSubscriptions) — the series you chose to watch for new chapters, and the last chapter list seen for each. No personal data. - Reading stats (
cdlReadStats) — if you enable the optional reading-stats / catch-up features: per-day chapter counts, active reading time, and your average reading pace. Computed and kept entirely on your device; never transmitted. - Resume positions & last-read (
cdlReaderScroll,cdlLastRead) — if you enable the optional resume / recap features: the scroll position where you stopped in a chapter and the last chapter you opened per series. Local only. - Your own flags (
cdlFlaggedChapters) — chapter identifiers you have flagged through the community-flags feature, kept locally so the extension doesn't let you flag the same chapter twice. - Download-session snapshot (
cdlDownloadAllSession) — the progress of a running “Download All” (counts and chapter labels), kept so the progress panel can be restored after a page refresh or browser restart. Local only. - Library connection (
cdlLibrary) — only if you set up Push-to-library: the server address, method, and any username/password or token you enter. These credentials are stored locally for the sole purpose of uploading to your server, are never sent to the Developer, and are deliberately excluded from the settings export file.
b) Data processed transiently (not stored)
The Extension reads the following in your browser's memory only while performing the relevant action, then discards it:
- The web address (URL) and on-page data of the comix.to chapter you ask it to download, in order to locate the page images, and (optionally) public series details shown on the title page (cover, author, description, genres) to write metadata into the saved files.
- The image files themselves, which are fetched from comix.to's image hosts and assembled into a ZIP or CBZ archive entirely within your browser.
- While ad blocking is enabled, the destination of a clicked link or requested popup, used only to distinguish a link or share action you intentionally opened from an unsolicited ad. These destinations are neither stored nor transmitted by the Extension.
This transient data is handed to your browser's own download manager to save the resulting file. The Developer never receives any of it.
c) Optional features that send data off your device
These are off by default and only act after you explicitly enable and configure them:
- Watch for new chapters (Subscriptions). When enabled, the Extension periodically makes background requests to comix.to itself (the same site you download from) to check your subscribed series for new chapters, and may show you a desktop notification. These requests go only to comix.to; no data is sent to the Developer or any third party.
- Push-to-library. When enabled, after building a CBZ the Extension uploads that file to the server you specify (e.g. a WebDAV or HTTP folder watched by your own Komga/Kavita install), using the address and credentials you entered. The files and credentials go only to your chosen server. The Developer receives nothing. This feature requires you to grant access to that specific server when you save its address.
- Custom Home, read-ahead and similar reading enhancements. When enabled, these make requests only to comix.to (its pages and its own API, using the session your browser already has there) — for example to list the series you follow, or to pre-load the next chapter as you near the end of the current one. Nothing about this leaves comix.to and your device.
d) Built-in community features (tenure badge & chapter flags)
Version 2.4 added two small community features that are part of the Extension: a profile tenure badge (other extension users can see roughly how long you've used the Extension) and community chapter flags (see how many other users flagged a chapter as broken / missing / wrong, and flag chapters yourself). They are powered by a tiny, open-source Cloudflare Worker operated for this project (its source is in the public repository). This is the only server component associated with the Extension, and it is deliberately designed to know as little as possible:
- What it receives: an opaque, salted, one-way SHA-256 hash of your comix.to user id (for the badge), an equally opaque hash of a chapter id plus a flag category (broken / missing / wrong) when you flag a chapter, and lookup requests for such hashes. One-way means the original ids cannot be recovered from what is sent.
- What it stores: hash → a coarse first-seen date (for the badge), and hash → aggregate flag counts. Nothing else.
- What it never receives: your name, email, comix.to username, readable user or chapter ids, series titles, reading history, settings, or downloads. There are no cookies, no sessions, and no advertising or analytics identifiers.
- Network metadata: like any web request, these calls technically expose your IP address to the receiving infrastructure (Cloudflare). The Worker does not log, store, or use IP addresses; transport-level handling by Cloudflare is governed by Cloudflare's own policies.
- Control: these features stop entirely when you uninstall the Extension. Because the stored entries are irreversible hashes, they cannot be linked back to you by the Developer or anyone else; if you nonetheless want your entries removed, contact us (Section 21) and we will help.
e) Remote notices & announcements
The Extension can show occasional notices the Developer posts — for example a heads-up that comix.to changed and a fix is on the way, or an important warning. To retrieve them it makes a request to the same open-source Worker described in 3(d), at its /v1/notices address. That request sends only the Extension's version number (so a notice can be targeted to the versions it applies to) and a cache-busting timestamp — it contains no identifiers, hashes, account data, or reading history of any kind. The Worker returns the current announcement text, which is displayed on the page and can be dismissed; dismissed notices are remembered locally so they don't reappear. Nothing personal is sent or stored, and there are no cookies, sessions, analytics, or advertising identifiers.
04 Browser permissions & why
The Extension requests the minimum permissions required to do its job. Each is used only for the purpose described:
storage- To save your settings and the activity log locally on your device.
downloads- To save the ZIP archive it builds to your computer using the browser's normal download mechanism.
scripting- To read the list of page images from a chapter page so the correct files can be downloaded.
tabs- To briefly open background tabs that load each chapter (so their images can be extracted) and to send progress updates to the page you started from. These tabs are closed automatically.
contextMenus- To add “Download this chapter / whole series” entries to the right-click menu on comix.to pages.
alarms- Only used by the optional “Watch for new chapters” feature, to schedule the periodic background check at the interval you choose.
notifications- Only used by the optional “Watch for new chapters” feature, to show a desktop notification when a subscribed series has new chapters.
declarativeNetRequestWithHostAccess- To set the correct
Refererand remove theOriginheader on the Extension's own image-download requests to comix.to's image CDNs (thewowpichosts), which those servers require before they will serve a chapter image. This rule only rewrites those two headers on the Extension's own fetches to those specific image hosts — it does not block, redirect, monitor, or read any of your other browsing, and it applies to no other site. - Host access
comix.to & its image hosts - To fetch chapter pages, page images, and series covers — from comix.to, its cover host (
static.comix.to), and its image CDNs (thewowpic1–9.storehosts that serve chapter page images). The Extension runs only on comix.to pages and only contacts comix.to and the image hosts it uses. - Host access
community service (workers.dev) - To reach the small open-source Worker behind the tenure badge, community chapter flags (Section 3(d)) and remote notices (Section 3(e)). Only anonymous one-way hashes, coarse counters, and the extension's version number are ever exchanged with it.
- Optional host access
your library server only - Requested on demand only if you enable Push-to-library, and granted only for the exact server address you enter — so the Extension can upload CBZ files there. It is never requested otherwise.
The Extension does not request access to your browsing history, bookmarks, microphone, camera, or location. Apart from comix.to, its image hosts, and the community service above, it contacts no other site unless you explicitly configure Push-to-library to your own server.
05 What we do not collect or do
- We do not collect, store, or transmit any personal data.
- We operate no backend except the single, minimal community Worker described in Section 3(d) — which receives only anonymous one-way hashes and coarse counters, and could not identify you even if we wanted it to.
- We use no analytics, telemetry, crash reporting, advertising, fingerprinting, or tracking of any kind.
- We do not create user accounts or profiles, and we do not require sign-in.
- We do not sell, rent, share, or monetize any information. There is nothing to sell.
- We do not read any website other than comix.to (the Extension runs only on comix.to pages), and we do not modify the content you download.
06 comix.to & third parties
The Extension interacts with the third-party website comix.to and its content-delivery networks in order to fetch the pages and images you ask it to download. The Developer does not own, operate, or control comix.to, and is not affiliated with, endorsed by, or sponsored by it.
Your use of comix.to is governed by comix.to's own terms of service and privacy policy, not by this Policy. Any data that comix.to or your network provider may collect about your visits (for example, server logs or your IP address when your browser requests a page or image) is outside the Developer's control and responsibility. We encourage you to review the policies of any third-party site you use.
The community features in Section 3(d) run on Cloudflare Workers, an infrastructure provider. Cloudflare processes the network traffic needed to deliver those requests (as any host would) under its own privacy policy; the Worker application itself stores only the anonymous hashes and counters described above.
07 Storage, retention & your control
All data the Extension keeps is stored locally and remains under your control:
- Settings persist until you change them, reset them to defaults, or remove the Extension.
- Activity log is a small rolling buffer; older entries are dropped automatically, and you can clear it at any time from the popup.
- Reading data (stats, resume positions, last-read, your own flags) is capped in size, stays on your device, and disappears with the rest when you uninstall. Turning the corresponding features off stops new data from being recorded.
- Reset: the settings page includes a “Reset to defaults” action (with confirmation) that restores all preferences.
- Removal: uninstalling the Extension deletes all of its locally stored data from your browser.
The only server-side records that exist anywhere are the anonymous hash → date and hash → count entries of the community service (Section 3(d)). They contain no personal data, cannot be traced back to you, and become permanently orphaned the moment you uninstall. If you would like them removed anyway, contact us (Section 21).
09 Security
Because the Extension keeps your data in your browser's local storage, the principal safeguard for it is the security of your own device and browser profile. The Extension's source code — including the community Worker's — is publicly available for inspection on GitHub. Network requests to fetch comic images use the connections provided by comix.to and its image hosts; requests to the community service are made over HTTPS and carry only the anonymous hashes described in Section 3(d).
No method of electronic storage or transmission is ever completely secure, and we cannot guarantee absolute security.
10 Children's privacy
The Extension is a utility intended for a general audience and is not directed to children. It does not knowingly collect any information from anyone, including children under the age of 13 (or the equivalent minimum age in your jurisdiction). Because the Extension collects no personal data at all, it cannot knowingly collect personal data from children.
Note that the comic content available on comix.to is published by a third party and may include material that is not appropriate for minors. Supervision of access to such third-party content is the responsibility of a parent or guardian.
11 International users & GDPR / UK GDPR
The Extension can be used worldwide. It performs its processing locally on your device and does not transmit personal data to the Developer. The community service (Section 3(d)) handles only irreversibly hashed, unlinkable identifiers and coarse counters; to the extent any of that were nonetheless considered personal data under the EU General Data Protection Regulation (GDPR) or UK GDPR, it is processed on the basis of the Developer's legitimate interest in providing the community features, with data minimisation applied by design (one-way hashing, no readable ids, no IP retention, coarse aggregates only).
For transparency, the data-subject rights such laws provide (access, rectification, erasure, restriction, portability, and objection) would, in practice, be satisfied entirely by the local controls described in Section 7 (changing settings, clearing the log, or uninstalling), since you alone hold any data the Extension uses. If you believe you have a privacy concern, you may contact us using the details in Section 21.
12 California privacy rights (CCPA / CPRA)
We do not collect “personal information” as defined by the California Consumer Privacy Act (CCPA), as amended by the CPRA. We have not sold or shared personal information in the preceding twelve months, and we do not do so now. Consequently, there is no California consumer information for us to disclose, delete, correct, or opt you out of selling. California residents are nonetheless welcome to contact us with any questions.
13 Browser-store disclosures
Google Chrome Web Store — Limited Use
The Extension's use of information obtained through it complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. The Extension does not collect or transmit personal user data to the Developer or to any third party, and does not use or transfer data for advertising, creditworthiness, or any purpose unrelated to its function. The optional Push-to-library feature uploads the files you download only to a server you configure; the community features exchange only the anonymous hashes described in Section 3(d), used solely to display the badge and flag counts.
Mozilla Add-ons (AMO)
The Extension collects no personal data for the Developer. All settings, logs, history, reading data and credentials remain in local browser storage on your device; the optional Push-to-library feature sends downloaded files only to your own configured server; and the community features transmit only anonymous, one-way-hashed identifiers and coarse counters as described in Section 3(d).
15 Legal disclaimer & limitation of liability
This document is provided for transparency and does not constitute legal advice. It is not a substitute for advice from a qualified lawyer regarding your specific circumstances.
The extension is provided “as is” and “as available”, without warranty of any kind, whether express, implied, or statutory, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement. The developer does not warrant that the extension will be uninterrupted, error-free, secure, or compatible with any particular website (including comix.to, whose structure may change at any time and break the extension).
To the maximum extent permitted by applicable law, in no event shall the developer be liable for any direct, indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of data, profits, or goodwill, arising out of or relating to your use of, or inability to use, the extension — even if advised of the possibility of such damages. Your sole and exclusive remedy is to stop using and uninstall the extension.
Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain liabilities; in those jurisdictions, the above exclusions and limitations apply to the fullest extent permitted by law and nothing in this Policy limits any rights you have that cannot lawfully be limited.
16 Acceptable use & copyright responsibility
The Extension is a neutral, general-purpose tool that automates actions you could otherwise perform manually in your browser. It does not host, store, upload, distribute, or supply any comic, manga, manhwa, image, or other content; it operates entirely on your device and only accesses content that you direct it to and that your browser is already able to reach.
You agree that you are solely responsible for your use of the Extension, including ensuring that it is lawful where you live and that it complies with the terms of service of comix.to and of any other site you access. In particular:
- Comics, manga, and similar works are typically protected by copyright. Downloading or retaining copies you are not authorized to make may be unlawful in your jurisdiction.
- You should only download content that you are legally entitled to download — for example, content that is in the public domain, that is offered for download by the rights holder, or that you have the necessary rights or permission to copy.
- The Developer does not encourage, induce, or condone copyright infringement or any other unlawful use of the Extension, and provides it for lawful personal use only.
If you do not agree to take this responsibility, do not use the Extension.
17 Copyright / DMCA complaints
The Extension does not host or distribute any content, so there is no content hosted by the Developer to remove. If comic content is accessible to you, it is served by comix.to or another third party; copyright complaints about that content should be directed to the operator of the site that hosts it.
If you are a rights holder and believe the Extension's source code or its listing text itself infringes your rights, please contact us using the details in Section 21 with: (a) identification of the work; (b) the material you object to; (c) your contact information; and (d) a statement of your good-faith belief and authority to act. We will review and respond in good faith.
18 Open-source license
The Extension is free and open-source software released under the MIT License. The full license text is included with the source code in the project's GitHub repository. The MIT License governs your rights to use, copy, modify, and redistribute the Extension's code; it does not grant any rights in third-party comic content.
19 Changes to this policy
We may update this Policy from time to time — for example, to reflect new features or legal requirements. When we do, we will revise the “Last updated” date at the top of this page and publish the new version here. Material changes may also be noted in the project's release notes. Your continued use of the Extension after an update takes effect constitutes acceptance of the revised Policy.
20 Governing law
This Policy and any dispute arising out of or relating to it or the Extension are governed by the laws of FRANCE, without regard to its conflict-of-laws rules, and subject to any mandatory consumer-protection rights you have in your place of residence.
21 Contact
Questions, privacy concerns, or legal notices regarding the Extension can be sent to:
- GitHub: github.com/N3uralCreativity/comix-downloader/issues (preferred for general questions)
- Developer: N3uralCreativity