Comix Downloaderv4.3.5
Privacy and legal

Privacy Policy and Legal Notice

Last updated: 29 September 2026 - Effective: 26 September 2026

This policy covers the free Comix Downloader extension and the optional Comix Downloader Plus service: the account, the Cloud Library, the Release Agenda, encrypted sync, and the web library. The free extension works without an account, and nothing is sent to Plus unless you sign in.

Free mode: no account is required, no reading analytics are sent to the Developer, and every free feature stays free. Settings, logs, reading data, downloads, and credentials stay in your browser, except for requests you direct to comix.to or comix.ws, your own library server, or the anonymous community service.

Plus: an account you create with your email. Cloud Library pages and names, synced settings and reading data, and restore points are encrypted in your browser before upload. The service keeps a protected copy of your account key so that a code sent to your email is all a new device needs, and it does not open your data. It also sees your email, your subscription and devices, and how much storage you use.

01 Scope and controller

Comix Downloader is a browser extension published by Leo Péron under the name N3uralCreativity (the Developer, we, or us). Comix Downloader Plus is an optional paid service for that extension, with an account, a Cloud Library, a Release Agenda, encrypted sync, a web portal, and a web library. The Developer is the controller of the personal data described here. This policy does not cover comix.to, comix.ws, image delivery networks, a library server you configure, browser stores, Stripe, Link, Resend, or Cloudflare, which process data under their own policies.

Comix Downloader and Plus are independent projects and are not affiliated with, endorsed by, or sponsored by comix.to or comix.ws.

02 Free extension data

Stored locally

The free extension can store settings, per-series presets, download markers, watched series, resume positions, reading statistics, followed-series chapter-age observations and inferred agenda state (used by the Plus Release Agenda), technical logs, running-download checkpoints, notice state, and review-prompt state in browser local storage. Push-to-library credentials also remain local and are excluded from settings exports.

Processed for requested functions

When you request a download, the extension reads public title and chapter information, opens chapter pages, fetches images, builds archives, and hands files to the browser download manager. When enabled, it can contact comix.to or comix.ws to check watched series, or contact a library endpoint you configured to upload a finished CBZ.

What free mode does not do

  • No account or Plus API request is made unless you explicitly create an account, sign in, or start Plus setup. When you are signed out, the account icon in the popup only opens the sign-in screen.
  • No advertising, behavioral analytics, fingerprinting, or sale of data is used.
  • Local logs, cookies, CAPTCHA information, library credentials, and Agenda history are never sent to Plus. Downloaded pages reach Plus only when you choose to save a chapter to the Cloud Library (Section 5).

03 Anonymous community service

The profile tenure badge, community chapter flags, and remote notices use a separate open-source Cloudflare Worker. It receives one-way hashes derived from public Comix identifiers, coarse flag counters, and the extension version needed to select a notice. It does not receive an email, readable user ID, title name, reading record, or downloaded content.

Cloudflare necessarily handles network information such as an IP address while delivering a request. The application does not intentionally store those addresses for community features.

04 Plus account and sign-in

Plus stays off until you sign in, from the extension popup, the Plus settings page, or the web portal. The first sign-in in the extension asks your browser for permission to contact the Plus service (and, in Firefox, for the optional data consent in Section 15). Plus then processes:

Email address
Used for six-digit sign-in codes, account identification, a reminder before a trial ends, payment problems, security notices such as a new-device sign-in, deletion warnings, and, if you joined the waiting list while Plus was full, one message when a place opens. It is not added to a marketing list.
Waiting list
If Plus is full when you try to start it, your account joins a waiting list with the time you joined and the time you were told a place opened. The entry is deleted with your account.
Feedback you send
If you use Tell the developer in Plus settings or on the web portal, your message, the topic you picked, your plan state, and where you sent it from (extension version and browser name, or the website) are emailed to the Developer through Resend. Your email address is included only when you allow a reply. The Plus service does not store the message; it only counts messages per account to limit them to five a day.
Authentication records
Hashed sign-in codes, hashed session tokens, expiry times, and revocation state. Raw tokens are stored by the extension or web library, not in readable form in the service database.
Device records
A random device ID, a device name such as browser and platform, a public ECDH key, approval state, and last-seen time. Up to five extension devices can be active; web sessions do not count toward that limit. A device you sign in to with an email code can open your cloud data right away, and we email you when a new device signs in.
Account key
A copy of the key that encrypts your cloud data, itself encrypted with a separate server secret and bound to your account, so an email code can unlock any device (Section 7).
Entitlement records
Trial, active, grace, cancellation, expiry, and renewal dates, plus Stripe customer and subscription identifiers. We do not receive full payment card details.
Storage records
For the Cloud Library: item counts, stored bytes, page counts and sizes, which item sits in which folder, upload and trash state, revision numbers, and timestamps. These enforce storage limits and keep devices in step.
Operational records
Request IDs, error codes, API timing, ciphertext size, schema version, revision number, and timestamps used for security and reliability. Logs must not include email, tokens, title names, reading records, file names, or ciphertext.
Rate-limit records
A keyed hash of the requesting IP address and time-window counters, used to limit sign-in code requests and API abuse. Counters are deleted after two days and are not used for tracking or advertising.

05 Cloud Library

The Cloud Library stores chapters you choose to save, so you can read them on your other devices and in the web library. Nothing is uploaded automatically, and items are private to your account: there is no sharing or publishing feature.

What is encrypted

Before upload, the extension encrypts every page with AES-256-GCM, using a key derived from your account encryption key, and binds each page to your account and to that item so it cannot be swapped with another. Chapter, folder, and series names, page file names, a small preview image of the first page, and your reading position in each chapter are encrypted the same way. Encrypted pages are stored in Cloudflare R2 and encrypted metadata in Cloudflare D1.

What the service can see

Your account, whether each item is a chapter or a folder and which folder it sits in, the number and encrypted size of its pages, a SHA-256 digest of each encrypted page used to verify uploads, upload and trash state, and timestamps. To avoid saving the same chapter twice, the extension also sends an identifier computed from the chapter address with your encryption key; the service cannot turn it back into a title or address. Because the service holds a protected copy of your account key (Section 7), it could technically decrypt these items; it does not open them, except where the law requires.

Limits

Each account has a storage limit and an item limit, shown in the Cloud Library. Each encrypted page can be up to 8 MiB, and each chapter up to 1,000 pages.

On your devices

While a chapter uploads, its encrypted pages are kept in the browser's IndexedDB so an interrupted upload can resume. Your item list is cached, still encrypted, so the library opens offline. Pages you save for offline reading stay encrypted on the device until you open them, and you can remove them from a device at any time.

06 Release Agenda

The Release Agenda shows when chapters of the series you watch are expected. The extension builds it in your browser: it reads recent chapter ages from the title pages of series you follow on comix.to or comix.ws, combines them with the dates it first saw new chapters, and shows the result as a page on the Comix site. Release history and estimates are stored in the extension's local storage, are not a sync category, and are never sent to Plus. Plus is used only to confirm that your subscription is active. The watched series themselves sync only if you select the Watched series category.

07 Encrypted synchronization and your account key

You choose each category, and all of them start unchecked. The categories are settings and presets, watched series, reading progress and resume positions, downloaded-chapter markers, and reading statistics.

The extension serializes the selected data and encrypts it locally with AES-256-GCM. The service receives only the encrypted envelope and limited metadata: opaque account and device identifiers, revision, schema version, size, and timestamps. It stores ciphertext in Cloudflare R2 and metadata in D1.

Your account key is created in your browser. The service keeps a copy of it, encrypted with a separate server secret and bound to your account, and hands it to a browser only after you sign in there with an email code. That is what lets an email code alone unlock a new device, and it also means the service could technically decrypt your data. We do not open it, except where the law requires. Resetting cloud encryption deletes the key and your cloud snapshots, but never local extension data.

Sync never includes activity logs, active downloads, downloaded ZIP or CBZ files, library credentials, authentication cookies, notices, review state, CAPTCHA information, or Release Agenda history. Chapter pages go to Plus only through the Cloud Library.

08 Web portal and web library

The Plus web portal handles sign-in, billing, and account settings. The web library lets you read your Cloud Library in any browser and can be installed as an app.

Cookie
The portal sets one strictly necessary cookie, cdl_plus_session, which holds your sign-in session. It is HttpOnly, Secure, and SameSite=Lax, lasts up to 30 days, and is cleared when you sign out. Plus uses no analytics, advertising, or tracking cookies.
Browser storage
The web library keeps its sign-in session, device keys, and theme choice in the browser's local storage. It unlocks your library as soon as you sign in with an email code, like any other device.
Shared sign-in
When Comix Downloader in the same browser has been allowed to reach Plus, a small extension script runs on the portal and web library pages. It tells the page whether the extension is signed in and with which email, and passes single-use sign-in codes between them, so signing in or out on one side does the same on the other. The page keeps the time of its last sign-in or sign-out in local storage to tell which side acted last. The script reads no other page content and is never added for free users.
Offline use
A service worker caches the web library's own files so it opens without a connection. Pages you save offline stay encrypted in IndexedDB, as in Section 5.

09 Billing and transactional email

Stripe Managed Payments provides checkout for the 30-day card-backed trial and the US$1.50 monthly subscription, with Link acting as merchant of record. Stripe and Link handle payment methods, applicable indirect taxes, invoices, renewals, refunds, transaction support, and legally required records. Plus receives only the identifiers and subscription state needed to grant access.

Stripe and Link deliver receipts and subscription messages. Resend delivers sign-in codes, new-device security alerts, the one-time seven-day trial reminder, and deletion warnings from [email protected]. Plus sends no newsletters, abandoned-cart campaigns, or promotional email.

A one-way email hash and Stripe customer ID may remain after account deletion solely to enforce one trial per verified account or customer and prevent repeated-trial abuse. This record is not used to contact, profile, or advertise to you.

10 Browser permissions

storage
Stores local extension settings, download state, and, when signed in, Plus account state.
downloads
Saves requested archives, and a Plus data export you request, through the normal browser download manager.
tabs and scripting
Open temporary chapter tabs and extract the images needed for requested downloads.
offscreen
In Chromium browsers, hands a finished archive to the download manager from a hidden extension page.
alarms
Schedules update checks, watched-series checks, and, only for signed-in Plus accounts, sync every 15 minutes while the browser runs.
notifications
Shows watched-series and extension service notifications selected by the user.
contextMenus
Adds download commands to comix.to and comix.ws context menus.
declarativeNetRequestWithHostAccess
Applies static header rules only to extension-originated requests for known Comix image hosts.
Comix sites and image hosts
Fetches title pages, chapters, covers, and page images from comix.to and comix.ws.
Community Worker
Contacts the exact anonymous community and notices Worker origin.
Plus service (optional)
Requested the first time you sign in to Plus, and used only for the account, subscription status, sync, Cloud Library, and device approval.
Library server (optional)
Requested on demand for an endpoint you enter for Push-to-library.

11 Retention and deletion

  • Sign-in codes expire after 10 minutes, allow five attempts, and are deleted within a day of expiring. Codes that pass a sign-in between the website and the extension work once, expire after two minutes, are stored only as hashes, and are deleted within a day of expiring.
  • Access tokens expire after 15 minutes; rotating refresh sessions and the portal cookie expire after 30 days or on sign-out or revocation.
  • The latest encrypted sync state and one daily restore point are kept for 30 days. A limited number of Before restore points are also kept within that period.
  • Cloud Library items in the trash can be restored for 7 days, then they and their encrypted pages are permanently deleted. Deleting an item permanently from the trash removes it right away. Uploads left unfinished for 24 hours are removed.
  • Cancellation keeps Plus active through the paid or trial period. Failed payments receive a seven-day grace period.
  • Expired accounts are read-only for 90 days: you can still read, export, and delete your sync data and Cloud Library items, but not add new ones. After that, encrypted snapshots, sync metadata, and every Cloud Library item are deleted. We email a warning 7 days before.
  • Delete cloud data removes sync snapshots and leaves the account and Cloud Library in place. Reset cloud encryption removes snapshots and wrapped key data; it is available only after you export and permanently delete your Cloud Library, since existing items cannot be moved to a new key. Both preserve local data.
  • Delete account cancels the subscription, revokes sessions and devices, and deletes synced data and every Cloud Library item. If the cancellation fails, nothing is deleted and you can try again. Stripe and Link retain records required by law; the one-trial anti-abuse record described in Section 9 remains.
  • Local extension data stays in your browser until you remove it or uninstall the extension.

12 Security

Controls include HTTPS, local authenticated encryption for sync and Cloud Library data, encryption bound to each account and item, opaque random identifiers, hashed tokens and codes, short access-token lifetime, rotating refresh tokens, sign-in attempt limits, per-email, per-IP, and per-account rate limits, new-device email alerts, a server-side secret protecting stored account keys, webhook HMAC verification, idempotent webhook processing, five-device enforcement, encrypted restore points, and deletion controls.

The account key is stored in browser local storage so the extension and web library work without signing in again each time. Anyone who can read your email can sign in to your account, so keep your email account secure; anyone who fully controls your browser profile may also be able to access the key. No electronic system is absolutely secure.

13 Providers and international processing

Cloudflare provides Worker execution, D1 database storage, R2 object storage, and network security. Resend delivers service email. Stripe Managed Payments provides checkout, and Link acts as merchant of record. Browser stores distribute packages. These providers may process data in countries outside your own under their terms, data-processing agreements, and legally recognized transfer mechanisms.

We do not sell personal data, share it for cross-context behavioral advertising, or use it to determine creditworthiness.

14 Your privacy rights

Depending on your jurisdiction, you may have rights of access, correction, deletion, restriction, objection, and portability. Plus settings provide account status, export, cloud deletion, device revocation, sign-out, and account deletion, and the Cloud Library lets you download your chapters. For any other request, email [email protected] from your verified account email, or include it, so the account can be located.

EU and UK processing bases include performance of the Plus contract for the account, Cloud Library, sync, and billing; consent for optional categories and permissions; legitimate interests for security, abuse prevention, and minimal community features; and legal obligations for billing records. You may complain to your local data-protection authority.

15 Browser-store disclosures

Without an account

Free use requires no Plus account, no Plus permission, and no data-collection consent. Data is not used for advertising, unrelated profiling, lending, or sale.

When you sign in to Plus

Chromium browsers ask for permission to contact the Plus service. Firefox also asks for optional consent to process personally identifying information (your account email), authentication information (sign-in, sessions, recovery, and device approval), browsing activity (the watched series, reading progress, and downloaded-chapter markers you choose to sync, encrypted), website content (the chapter pages you choose to save to the Cloud Library, encrypted before upload), and technical and interaction data (synced settings and the minimal errors, sizes, and timings needed to run the service). Declining leaves every free feature available.

16 Children

The extension is a general utility and is not directed to children. Plus requires the legal capacity to enter a paid subscription, or authorization from a parent or guardian where applicable. We do not knowingly create Plus accounts for children who cannot lawfully consent. Third-party comic content may be unsuitable for minors and remains the responsibility of the site and the user or guardian.

18 Changes to this policy

We may update this policy for product, security, provider, or legal changes. The updated date will change, and material changes will be announced in release notes, a service notice, or an email to Plus accounts. New sync categories will remain opt-in.

19 Contact

Developer: Leo Péron (N3uralCreativity), 26 rue Hippolyte Prévost, 31300 Toulouse, France. For privacy, account, billing, and content-notice matters, email [email protected]. General support and bug reports go through GitHub issues. Do not post an email address, payment detail, access token, or synced data in a public issue, and never send a card number by email.