Privacy Policy

The short version: your comics and photos stay on your device — stored in your browser, with every export generated there. We have no copy of them and no way to see them.

There is one exception, and it only happens when you ask for it. The AI features cannot run in your browser, so a panel you ask to transform, or photos you upload to build a character, are sent to us and passed to an AI provider. That is described in full below.

Comics That Pop is responsible for the little personal data described below. For any privacy question, or to exercise the rights at the end of this page, email hello@comicsthatpop.com.

What stays on your device

Stored in your browser (IndexedDB and local storage), and not transmitted to us except where you use an AI feature:

• Your comics — pages, panels, text, layout
• Photos, GIFs and audio you add
• Exported videos, PDFs, images and eBooks
• Editor preferences

You can remove all of it at any time by deleting your comics in the app, or by clearing site data for this website in your browser settings. That deletion is immediate and complete for everything held on your device. If you have an account, see Your account below for what deleting that removes.

What we do process

Everything else that reaches a server is listed below. Only the account section identifies you.

AI image generation

When you use an AI feature, this is sent to our server and on to our AI provider, Google (Gemini API):

• The panel you asked to transform, rendered as an image
• Any character reference sheets or reference photos that panel uses — resized before sending
• Your written instruction, and the style notes from your story

This happens only when you press Generate, and only for the panel involved. Nothing is sent in the background, and none of it happens at all if you never use these features.

We do not store the images or prompts after your request is answered — the result is returned to your browser and kept there. We record that a generation happened, and what it cost in credits, because that is how an allowance is counted; that record holds no image and no prompt text.

Your content is not used to train models. We use the Gemini API under terms where submissions are not used to improve Google’s models, and Google retains them only briefly for abuse monitoring. Google processes this as our sub-processor, and its own privacy terms apply to that handling.

Think before uploading a photo of another person. A reference photo goes to a third party for processing. Only upload pictures you have the right to use, and consider whether the people in them would agree.

Loading a GIF or image by link

If you paste a link to an image, our server fetches that URL and passes the image back to your browser — a step needed because most sites block browsers from loading their images directly. We see the URL you pasted in order to fetch it, and we do not store the URL or the image. The image is saved only in your browser.

Server logs

Our hosting provider (Vercel) records standard technical request logs, which include IP address, timestamp, requested path and browser user-agent. These are used to operate and secure the site and are retained for a short period by the provider. We do not use them to build profiles.

Your account

You can use Comics That Pop to make comics without an account. Signing in is needed only for the AI features, so that a credit allowance can be counted against someone.

Sign-in is with Google. We receive your email address and a user id, and we store, in a database run by Supabase (hosted in the EU):

• Your email address and account id
• Your plan, and your credit balance
• A ledger of credits granted and spent — a timestamp, an amount, and which feature it was, holding no image and no prompt text

We do not receive your Google password, and we do not ask Google for anything beyond your email address and basic profile.

Deleting your account removes all of it, including the credit ledger. Email hello@comicsthatpop.com and we will do it. Your comics are unaffected, because they were never ours — they stay in your browser until you delete them there.

There are no payments yet, so we hold no card or billing details at all. If that changes we will update this policy first, and payment will be handled by a payment provider rather than by us.

Anonymous usage statistics

We count how the app is used, so we can tell which features people actually reach and spot a format failing on a whole class of device without waiting for someone to report it. We use Vercel Web Analytics, which is cookieless and stores no identifier for you.

What is counted is exactly this, and nothing else:

• Page views, and which page referred you
• A comic being created, opened, deleted or imported
• An export being started, which format it was, whether it failed, and if so a short technical description of the error (for example “encoder not supported”) so we can spot a format breaking on a whole class of device

No comic titles, filenames, images, audio or text are ever sent— only that something happened, and for exports which format. There is no account, so none of it is linked to a person, and it is not used to build a profile or for advertising.

Cookies

No advertising cookies and no analytics cookies — the usage statistics above work without them.

If you sign in, one cookie holds your session, so that you stay signed in between visits. It is strictly necessary for a feature you asked for, which is why there is still no consent banner: there is nothing here to consent to. Signing out removes it.

Third parties we rely on

• Vercel — hosting, delivery, and the cookieless usage statistics described above
• unpkg (CDN) — when you export a video with sound, your browser may download an audio-encoding component from this public CDN. The request comes from your browser and carries no information about your comic.
• Google — sign-in, and the AI model that generates images. Only used if you sign in or press Generate.
• Supabase — the database holding accounts and credit balances, hosted in the EU. Only used if you have an account.
• Lulu — printing and posting, if you order a printed copy. They receive the delivery name, address, phone number and email the carrier needs, and the file to print. Nothing is sent to them unless you order.

Some of these are outside the European Economic Area. Where that is the case, transfers rely on the safeguards those providers offer, such as the European Commission’s standard contractual clauses.

Why we are allowed to process it

Legitimate interest — keeping the Service running and secure, and understanding in aggregate, without identifying anyone, which parts of it work. That covers the request logs, the link-loading step and the usage counts.

Performance of a contract — your account and your credit balance. If you sign in and ask us to generate an image, we cannot do it, or count what it cost, without processing that.

How long we keep it

Without an account we keep nothing that identifies you. Our hosting provider retains technical request logs for a short period, and the usage statistics are aggregate counts with no identifier attached, so there is nothing in them to trace back to a person.

With an account, we keep your email address and credit ledger for as long as the account exists, and delete both when you close it. Images and prompts sent to the AI are not kept once the request is answered.

Your rights

You have the right to request access to any personal data we hold, its correction or deletion, a portable copy, or to object to processing. Without an account we hold almost nothing; with one it is your email address and your credit ledger. Either way, email hello@comicsthatpop.com and we will respond within one month.

Because your comics are only on your device, we cannot supply or delete them for you — you already have full control of them through your browser.

If you believe we have handled your data improperly you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), or to the authority in your country of residence.

Children

Since comics stay on the device and there are no accounts, we do not collect children’s personal data. If we introduce accounts in future, this section will be updated.

Changes

If this policy changes materially we will update the date below.