What we collect
- Your email address and a securely hashed copy of your password (never stored in plain
text) — bcrypt for passwords, SHA-256 hashes for one-time tokens like the sync token.
- Optional profile info you choose to add: a display name, an uploaded avatar image.
- If you sync manga from the desktop app: job titles, page counts, and — only if you've
opted into full remote reading — the actual translated page images and transcripts.
- Login/session records: IP address, browser/device info, and timestamps, so you can see and
revoke your own active sessions in Settings.
- Preferences you set: theme, library view, reader direction, notification opt-ins.
- If you use Study: your answers, reviews and their schedule, lesson notes, known words and vocabulary
backups.
- What you add to your library or share on the site: uploads and their pages, titles you share, comments,
reviews, votes, follows, and your profile's bio and banner.
- If you use AI Conversation: the conversations, so you can go back to them.
- If you use AI Tutor: your questions and its answers, for 7 days after your last question, so you can go back to them.
- If you use the Notebook: what you write or save in it.
- If you pay for a plan: which plan, the subscription's id and when it renews. The payment itself is handled
by Stripe (on the website) or Google Play (in the Android app); we never see your card details.
- If you use pyontan AI translation (see below): how many lines you translated
each day and how much AI processing they used — counts only, never the text itself.
- If you use Live Audio while signed in to the desktop app: when each session started, how long
it ran and how it went — how many lines it heard and translated, how many errors there were, and which
listening and translation settings it used. Never the audio or the text. Kept for 180 days.
How we use it
To run your account — authenticating you and showing your own synced library back to you — and
to send transactional email you've triggered: a password reset you requested, verifying a new
account or email address, or, only if you opt in, a notice when a new blog post is published. When you ask
for help, we look at your usage (AI, storage and Live Audio) to see what went wrong, and can give back usage a
problem cost you.
Signing in with Discord or Patreon
If you sign in with Discord or Patreon, that service tells us your account id there, your name there and your
email address (and whether it has verified it). We keep the id and name on your account so you can sign in with it
again. We don't post anything to either service, and you can disconnect it in Settings > Security. Patreon also
tells us about your membership, which sets your plan.
Translating on the website with your own key
If you add a DeepL, Google Cloud or AI-model key in Settings > Translation, we keep it on your account, encrypted,
and send it only to that provider along with the text you ask the website's Dictionary or Translator to translate. That
text then falls under the provider's own terms. We don't keep the text you translate. Remove a key in Settings at any
time.
pyontan AI translation
This applies only if you choose pyontan AI as your translation engine in the desktop app. The
other engines are unchanged: the offline engine never leaves your computer, and DeepL, Google and
custom-LLM translation go straight from the app to that provider under your own account.
- The lines you ask it to translate (and, for Live Audio, a few of the lines just before them, so it
can follow who is being talked about) are sent to our server and on to an AI provider that
translates them: Google (Gemini API) or, if Google is unavailable,
Anthropic (Claude API). We use their paid API services, whose terms do not allow
them to train their models on this content.
- We don't store the text you translate against your account, and we don't write it to logs.
- To save cost, a shared cache remembers recent translations for up to 30 days. It holds a one-way
hash of the line and its translation, not the original text and not who asked for it, and it is
shared between users.
- Common one-word reactions (such as 草 or www) are answered on our server without contacting an
AI provider at all.
Who we share it with
- MongoDB Atlas — hosts the database itself.
- Resend — sends the transactional emails described above.
- Sentry — error tracking, so real bugs can be found and fixed; this can
capture technical request details (like the page you were on) when something goes wrong,
not your password or synced content.
- Google and Anthropic — AI translation providers, only for text you
send through pyontan AI, as described above.
- Stripe and Google Play — take payments for paid plans, only if you buy
one.
We don't sell your data or share it with advertisers — pyontan doesn't run ads or third-party
tracking.
Browser extension
The pyontan Web Extension talks only to the desktop app on your own computer and sends nothing to us
itself. (If you have chosen pyontan AI as the desktop app's translation engine, the desktop app sends the
text to translate on our behalf, as described above.) See the Web Extension Privacy Policy for the details.
Android app
The pyontan Android app shows this website. It collects nothing beyond what's described on this page. Text you pick
from another app's text-selection menu, or share to pyontan, is opened in the website's Translator.
Cookies
See the separate Cookie Policy.
How long we keep it
For as long as your account exists. Deleting your account (Settings > Danger zone) permanently removes it and
everything on it. Delete your account lists what goes and the little that stays.
Your rights
You can update your display name, avatar, and email at any time in Settings, and delete your
account entirely whenever you want. If you'd like a copy of your data or have another privacy
request, reach out through the feedback page.
Changes to this policy
We may update this policy as the product develops. Material changes will be reflected in the
"last updated" date above.