Privacy Policy

FicPal (ficpal.com) lets you browse, read, like, and create AI-illustrated comics across genres — wuxia, romance, fantasy, fanfic, and more. This policy explains what information we collect as you use the platform, how we use it, and the limited set of third parties that help us run it. We try to keep this specific and human — if anything is unclear, email hello@ficpal.com.

• Account info from Google OAuth — when you sign in with Google, we receive your email address and display name. We do not receive your Google password.
• Comics you create — titles, scripts, characters, genre tags, cover images, panels, and related metadata you submit when building a comic on FicPal. Stored in Cloudflare D1 and R2.
• Reading progress — which comics you have read, which chapters you have reached, and any likes or bookmarks you set. Used to resume reading and personalise your browsing feed.
• Credit transactions — records of credit purchases and usage (what credits were spent on, when). Payment card details are never stored by FicPal — they are handled entirely by Stripe.
• Technical data — your IP address (used for rate limiting and fraud prevention via Cloudflare KV), browser user-agent string, and basic request logs required to keep the service running.

• Authentication — verifying your identity via Google OAuth and keeping you signed in with a secure session cookie.
• Personalisation — showing you comics relevant to your reading history and surfacing your in-progress reads when you return.
• AI generation — sending your comic scripts and style prompts to Azure (image generation) and OpenRouter (text assistance) to produce your comic panels.
• Fraud prevention and rate limiting — using IP and account signals to protect against abuse, spam, and credit fraud.
• Service improvement — aggregate, anonymised analytics to understand which genres are popular and where the user experience breaks down.
• Support — responding when you contact us with questions, bug reports, or account requests.

We do not train AI models on the private comics you create without your explicit, opt-in consent. Public comics may be used in aggregate analytics but are not fed to external model trainers without a separate disclosure.

FicPal is built on a small stack of trusted services. We do not sell your data. Each provider below receives only what it needs for the specific feature it powers:

• Google OAuth — handles your sign-in flow. Google receives your authentication request and returns your email and name to us. Governed by Google's Privacy Policy.
• Stripe — processes credit purchases. Stripe receives your payment card details directly and never passes them to FicPal. Stripe is PCI-DSS Level 1 certified.
• Cloudflare — hosts the application (Workers), our D1 relational database, R2 file storage (comic images, covers), and KV for rate limiting. All user traffic passes through Cloudflare's edge network.
• OpenRouter — receives your comic script prompts and returns AI-generated story text assistance. Prompts may include story context you provide.
• Azure AI (image generation) — receives panel description prompts to generate AI illustrations. Prompts are processed per-request and are not retained for model training by default under our Azure agreement.
• Google Analytics (gtag) — receives page-view events and aggregate usage data. No personal profile is built for advertising. You can opt out via the Google Analytics opt-out browser add-on.

We use a secure, HTTP-only session cookie to keep you signed in after Google OAuth authentication. We do not use third-party tracking cookies or advertising pixels. Google Analytics uses its own first-party cookie (_ga) for aggregate measurement only.

Clearing your cookies will sign you out of FicPal. Your reading progress and created comics are stored server-side and will be restored when you sign back in.

We keep your account data for as long as your account is active. When you request account deletion:

• Your account is soft-deleted immediately — you are signed out and cannot log back in.
• After 30 days your data is permanently purged from our database and file storage, including comics, reading progress, and credit history.
• Anonymised, aggregate usage records (e.g. genre popularity counts) may persist as they contain no personal data.

Individual comics may be deleted at any time from your creator dashboard. Panel images in R2 storage are removed within 24 hours of a comic being deleted.

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data FicPal holds about you.
• Correction — request that inaccurate data be corrected.
• Deletion — request that your account and associated data be deleted.
• Portability — request a machine-readable export of your comics and account data.
• Restriction — request that we limit how we process your data while a dispute is resolved.
• Opt out of sale — FicPal does not sell personal data, so there is nothing to opt out of.

To exercise any of these rights, email hello@ficpal.com from the address associated with your account. We aim to respond within 30 days (GDPR) or 45 days (CCPA).

FicPal is available to users aged 13 and older, consistent with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has registered an account, please contact us at hello@ficpal.com and we will remove the account promptly.

Any NSFW content tiers, if introduced in the future, will be restricted to verified users who are 18 or older.

If we make meaningful changes to how we handle your data, we will post the updated policy on this page and update the “Last updated” date. For significant changes we may also send a notice to your registered email address.

Data questions, deletion requests, or anything else — hello@ficpal.com. A real person reads every message.