Privacy Policy
Last updated: 2026
Overview
XOmanga (“we”, “us”, the “Service”) is a community-supported manga reader. We aim to collect as little personal information as possible and to be transparent about what we do collect and why. By using the Service you agree to the practices described in this policy.
Information we collect
- Account information. When you create an account we store your email address and a display name. Passwords are never stored in plain text — they are kept only as a salted cryptographic hash.
- Activity tied to your account. Your reading progress, the series you follow, and any ratings, reviews, and comments you submit are stored so the Service can sync them across your devices and display them where appropriate.
- Session cookies. A signed session cookie keeps you logged in. It is required for authenticated features to work.
- Mature-content consent cookie. When you confirm that you are 18 or older to view mature (18+) content, we set a consent cookie (
mx_mature) so the Service remembers your choice. You can clear this at any time using the 18+ toggle. - Technical and security data. Our hosting provider processes standard request data (such as IP address and user agent) to deliver content and protect against abuse, and we keep short-lived rate-limiting records to prevent spam and brute-force attempts.
How we use information
We use the information above to operate the Service: to authenticate you, to remember your reading progress and library, to display your ratings, reviews, and comments, to moderate user-generated content, and to keep the Service secure and available. We do not use your information for behavioral advertising.
We do not sell your data
We do not sell, rent, or trade your personal information to third parties. XOmanga is supported by voluntary donations, not by monetizing your data.
Third-party services
We rely on a small number of service providers to operate the Service. They process data only as needed to provide their service to us:
- Cloudflare — hosting, content delivery, storage, and security.
- Email provider — sending transactional email such as address verification and password resets.
- OAuth providers — if you choose to sign in with a third-party provider, that provider shares basic profile information (such as your email and display name) with us to create or link your account. We do not receive your provider password.
Cookies
We use only the cookies needed to run the Service: a session cookie for authentication and the mx_mature consent cookie described above. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings, though some features may not work without them.
Data retention
We retain account data for as long as your account is active. Reading progress, follows, ratings, reviews, and comments are retained while your account exists or until you remove them. Security and rate-limiting records are short-lived. When an account is deleted, the associated personal data is removed or anonymized, subject to any records we are required to keep for legal or safety reasons.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. You can view and update much of this information from your account page. Account deletion can be requested by contacting us, and we will action valid requests within a reasonable time.
Children
The Service is not directed to children. Some content is intended only for adults (18+) and is gated behind an age-confirmation step. See our Terms of Service for details.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.
Contact
Questions about this policy or your data? Contact us at email us.