Toonboxd Français

Toonboxd Privacy Policy

Last updated: October 29, 2026.

Version française : Politique de confidentialité de Toonboxd. This English page translates the French one, which is the reference: if the two ever differ, the French version prevails.

Toonboxd is an iPhone app for tracking your reading of manhwa, manhua and webtoons. This page says what the app knows about you, where it goes, and what you can do about it; one section also covers the toonboxd.app website, and another what the law where you live may add.

Who is responsible

Paul Maxime Nadin, self-employed (French SIREN 991987819), France. He is the data controller under the GDPR. There is no data protection officer: the size of the business does not require one.

For any question or request about your data: contact@toonboxd.app.

In one sentence

Toonboxd shows no ads, does no ad tracking, and neither sells nor rents anything it knows about you. What it collects is used to make the app work and to understand how it is used. The details follow.

What Toonboxd keeps about you

An account, created without asking you anything. On first launch, the app creates an anonymous account with a technical ID, a string of letters and numbers. No email, no name, no password. The whole app works with this account.

If you link your account to Apple. You can link this account to your Apple Account to get your library back on another iPhone. Apple then gives us an email address: yours, or a relay address if you chose to hide it. We never ask for your name. This address is used to identify you and is shown nowhere in the app.

Your library. The series you follow, their status (Reading, On Hold, Plan to Read, Completed, Dropped), the last chapter you read, the dates you added and last changed them, the series you pin, and the rating you give a series. And, since October 9, 2026, a day-by-day history of your reading: how many chapters you moved forward each day, kept apart from the ones you enter when you say how far you’ve read and the ones you take back, and the series you completed that day. It comes from what you already do in the app, and we keep it so we can one day show you statistics about your reading; no screen shows it today. It is private: no one but you can read it, and it does not leave our database. Each day of this history is counted in your own time: the app sends us your iPhone’s time zone (for example “America/New_York”), which we keep with your profile and the app updates when it changes; days counted before the app sent it, or without it, use Paris time. This time zone is an approximate location: it names your iPhone’s region, often a whole country, never where you are.

Your pause notes. The text you write when you put a series on hold. It is private: no one but you sees it, and it does not leave our database, not even in a notification.

Your username. The one you choose on your profile, if you choose one. It appears on the lists you share, and on the image of your top 5 card when you share it, and nowhere else for now: no one sees it until you have shared something. It will become public on the day profiles open; this page will be updated at that time.

The title you wear. Your profile has a gallery of titles that you unlock by reading: we keep the one you chose to wear, the date each title was unlocked for you and whether you have already seen it in your gallery, and nothing else. The choice is yours; you can change it or take it off whenever you want. It appears on the lists you share, under your username, and nowhere else for now. What never leaves: the rule that unlocked it, and your progress.

Your banner. The banner at the top of your profile is chosen from those the app offers: we keep the name of the one you chose, and nothing else. The choice is yours and you can change it whenever you want; everyone has one, even if it’s just the default. It appears nowhere else for now, not even on the lists you share. It will become visible with your profile on the day profiles open; this page will be updated at that time.

Your animation. Your profile can play an animation when you open it, chosen from those the app offers: we keep the name of the one you chose, or the fact that you have none, and nothing else. The choice is yours; you can change it or remove it whenever you want. It plays on your phone, is only seen on your profile, which no one else sees, and does not leave the app for now. Usage analytics only knows which one you chose, or that you removed it, never when it plays.

Your frame. Your profile can put an animated frame around your avatar, chosen from those the app offers: we keep the name of the one you chose, or the fact that you have none, and nothing else. The choice is yours; you can change it or remove it whenever you want. It is drawn on your phone, is only seen on your profile, which no one else sees, and does not leave the app for now. Usage analytics only knows which one you chose, or that you removed it.

Your top 5 card label. Your profile shows your top 5 card, headed “My top 5 manhwa”; you can write your own instead. We keep the text you write, and nothing else: once you erase it, the card goes back to the default label and we keep nothing. It appears on your profile, which no one else sees, and on the image of your card when you share it; nowhere else, not even on the lists you share. It goes to none of the services below: usage analytics only knows that you changed it, and whether you went back to the default label.

The image of your top 5 card, when you share it. “Share”, on your card, turns it into an image you send wherever you want. It shows your username, if you have one, with its avatar circle, your card label, the covers and titles of your ranked series, the rating and last chapter read of your #1, and your total chapters read if you leave it on: a checkbox, just above “Share”, removes it from the image, and your phone remembers your choice. It is made on your phone and goes through none of our servers: it only goes to the app you pick in the iOS share sheet, by your own action. Once sent, it’s out of our hands: we can neither take it back nor know who has seen it. Usage analytics only receives the number of series on your card, whether your total was on it, and the type of app you picked (Photos, Messages, Instagram…), never the image or what it shows, nor your total itself.

If you are a beta tester. We note the date you became one. It unlocks a “Beta Tester” title that you can choose to wear, like the others; that date itself never leaves our servers, even when you wear the title it unlocks. It is set by hand on your account, and you cannot give it to yourself. If you delete your account, it goes with it: we keep nothing that would let us give it back, and you will have to tell us so we can set it again.

Your lists. Their title, their description, and the series you put in them, in the order you set. A list is private when you create it, and it stays private as long as you don’t share it.

What a shared list shows, and to whom. When you share a list, the app first asks you to confirm, telling you what becomes visible. Once you confirm, the list can be viewed on a web page by anyone who has the link, without an account and without the app: its title, its description, the series in your order, your username, if you have one, with its avatar circle, and the title you wear if you wear one. What it does not show: your reading statuses, your pause notes, your ratings, how many lists you have, the links to your other lists, and, for the title, the rule that unlocked it and your progress on the others. The page is not indexed by search engines: you only get there through the link. It measures nothing: no trackers, no cookies, no visit statistics, for you or for the person who opens it.

How you undo a share. On the list, “Unpublish”. The page stops being viewable right away. The link stays yours: if you republish the same list later, it works again. If you delete the list, the link dies for good and cannot be brought back, even by creating the same list again. We cannot know who has already opened a link, nor take it back from whoever received it: that is true of any shared link, and it is the one thing to know before sharing.

If a shared list is reported. Its page has a “Signaler cette liste” link (report this list), which opens an email to contact@toonboxd.app. We read every report, and we take down a list whose text breaks the law, insults or harasses someone, or exposes their private life: its page stops being viewable, but nothing is erased. The list stays yours in the app, which tells you it was taken down and where to write to appeal. If you are the one reporting, we receive your email address and your message, as with any email: we don’t copy them anywhere, and we delete them once the report is handled.

Your title suggestions. The title you suggest, and the link or note you may add. If we add the series, it arrives in your library, under “Plan to Read”, and we let you know with a notification if you accepted notifications.

Your reports. When you report that a series came back from hiatus: the series and the date, nothing else.

Your iPhone’s notification token, if you accept notifications. The app only offers them the first time you put a series on hold, with a screen that explains why before iOS asks. If you accept, we keep a token that lets us send you notifications on this iPhone, provided by Expo (see below), the type of device, and the language of the app on this iPhone, English or French, so we can write to you in that language; if you change languages, the new one is kept the next time you open the app. The token is used for two things: letting you know when a series you put on hold is back, and when a series you suggested is added. If you decline, nothing is kept. You can turn notifications off whenever you want in iOS Settings.

What your rating becomes. Your rating of a series goes into an anonymous community average. If you remove your rating or delete your account, it is taken out of that average.

How long. As long as your account exists. Nothing is erased automatically: you decide, with the button described below. One known exception: if you use “Recover My Library” to get back an account linked to Apple, the anonymous account you leave stays in our database, with what it contained and with nothing that could identify you. An automatic purge of these accounts is planned.

Where to find your user ID. In the app: Settings, Account section, “Your User ID”. That is what we will ask you for in any request about your data.

What Toonboxd does not store. Your precise location (the time zone of your reading history, above, is the only location we keep, and it is approximate), your contacts, your photos, your name, your payment details. The app doesn’t ask for any of these permissions on your iPhone. If you choose “Save Image” when sharing your card, it is iOS that asks you to let Toonboxd add this image to your photos: add-only access, which cannot read your photo library.

What stays on your phone

On the device, the app keeps your session, your answers on the setup screens (number of series, selection, chapters), your display preferences, such as your sort preference or your choice to show your total on your card, your Share Usage Data choice, a cache of covers, a queue of usage events before they are sent, and the image of your card while you share it. All of it goes away when you delete the app.

The services Toonboxd uses

Six services receive data from your phone, and a seventh, Expo, receives data from your phone and from our servers to deliver notifications. For each one: what it is for, what it receives, where it is hosted.

Supabase: the database and accounts

PostHog: usage analytics

You can turn it off. In the app, Settings, Privacy section, the “Share Usage Data” checkbox. Once it’s unchecked, the app stops sending anything to PostHog or Firebase Analytics, anything still waiting on your phone is discarded, and RevenueCat loses the Firebase installation ID, so your purchases no longer reach Firebase either. Your phone remembers this choice from one launch to the next. What was already sent can be erased on request (below). Sentry crash reports still go out: this checkbox covers usage analytics, not crash reports.

Firebase Analytics (Google): the same analytics, a second destination

Sentry: crash reports

RevenueCat: the subscription

Expo: notifications

Apple: sign-in and payment

Sign in with Apple and purchases go through Apple. What Apple does with these operations falls under its own policy. What reaches us: an identity token when you link your account, and a receipt when you buy. Apple’s notification service is also what delivers notifications to your iPhone: it receives, through Expo, the messages described above.

Three other things

Ad tracking

There is none. The app contains no ad attribution tool, does not read your iPhone’s advertising identifier, and therefore never shows Apple’s tracking permission prompt. This is not a setting: these tools are absent from the app.

If we ever advertise Toonboxd and want to measure where installs come from, the app will first ask your permission through Apple’s tracking prompt, and this page will change.

Deleting your account

Where. In the app: Settings, Account section, “Delete Account”. A screen says what goes and what stays, then the app asks “Delete Your Account?”.

What goes, right away and for good. Everything Toonboxd stores about you: your account, your library, your reading history, your ratings, your pause notes, your username, your time zone, your card label, your reports, the notification token of your devices, your beta tester date if you had one, and the Apple address if you had linked your account.

What stays.

What deleting does not do. It does not erase what was already sent to the analytics services. PostHog and Firebase keep the events they received, filed under your ID. To erase them:

  1. Write down your user ID. The app shows it in Settings (“Your User ID”), and the screen that confirms the deletion shows it one last time.
  2. Send it to contact@toonboxd.app and ask for erasure.
  3. We ask PostHog and Firebase for erasure within the following month. Each service then handles the request at its own pace, which we do not control.

Sentry has nothing that points to you, so there is nothing to erase person by person. RevenueCat files your subscription under your account ID: you can ask us to erase it the same way, with this ID, once the subscription has ended; the subscription itself stays with Apple, and you cancel it in your Apple settings.

On the toonboxd.app website

If you leave your email to hear about the launch. The website lets you leave your email address to receive two messages, and nothing else: one for the beta, then one on the day Toonboxd arrives on your phone, on iPhone first, on Android later. We keep this address, the phone you give (iPhone or Android) and the date you left them, and nothing else: no name, no account, no link to the app. The type of phone you chose tells us which launch message to send you: the iPhone launch one, or the Android release one. The address is stored at Supabase, in Paris, in a table that neither the site nor the app can read back. It is used only for these two messages, and it is erased, along with your phone type, once the launch message has gone out, and at the latest twelve months after you signed up, even if that message has not gone out yet. If you signed up before October 13, 2026, when the site started mentioning the beta message, it promised you a single message, the launch one: you also receive the beta one, only once, and it says so. Replying “STOP” is enough to have your address erased; you then receive nothing more, not even the launch message. You can have them removed earlier, without giving a reason, by writing to contact@toonboxd.app from that address. Your consent, given by submitting the form, is what allows us to do this, and you withdraw it the same way.

What the site loads. Series covers come from our database, at Supabase, and load from the site that hosts them, the series’ official platform or MangaUpdates: your browser therefore contacts these services, as on a shared list. The site sets no cookies and measures nothing about its visitors.

Your rights

The GDPR gives you rights over your data. Here is what each one means here.

To exercise a right: an email to contact@toonboxd.app with your user ID (Settings, Account section, “Your User ID”). Without it, we cannot find you: an anonymous account has nothing else. We answer within a month.

On what basis. The account, the library and the subscription are necessary for the service you use. Usage analytics and crash reports fall under our legitimate interest in understanding and fixing the app; you can object to usage analytics at any time, with the checkbox in Settings. Notifications rest on your consent, given to iOS and withdrawn in iOS Settings. A list report is handled because the law requires us to act on illegal content reported to us.

Outside the European Union. Three services host data outside the EU: Google (Firebase Analytics), possibly in the United States, under its data processing terms (standard contractual clauses) and the Data Privacy Framework; RevenueCat, on AWS in the United States, under standard contractual clauses that its data processing agreement carries; Expo, outside the EU, certified under the EU-U.S. Data Privacy Framework. What Expo and Apple keep of notification messages has not been checked yet.

If you live outside France

Toonboxd is meant for readers in France and in English-speaking countries: the United States, the United Kingdom, Canada, Australia, Ireland and New Zealand. Everything above applies wherever you live, and if you live outside France, your information is stored and processed outside your country: in France and the European Union, and in the United States or elsewhere outside the EU for Google, RevenueCat and Expo (see “Outside the European Union” above). Here is what the law where you live may add.

If this page changes

The date at the top changes, and the list below says what changed. The full history of this page is public, and every version stays readable there: since October 16, 2026 in the website’s repository, which hosts it, toonboxd-web, and before that date in the former repository, toonboxd-legal. The changes made before this English version existed are listed on the French version of this page.

What this page does not cover

The terms of the Pro subscription, which fall under Apple’s standard End User License Agreement.