Privacy Policy
Last updated: July 2026 · Governed by EU/German law (GDPR)
1. Who we are
MangaConverter is operated by:
Nils Leo
Reinacher Zeile 12, 12205 Berlin, Germany
support@mangaconverter.com
This is the data controller for all personal data processed through mangaconverter.com. This policy describes what data we collect, why, and your rights under the General Data Protection Regulation (GDPR).
2. Data we collect and why
Account data
When you create an account we collect your email address and optionally your name. This is processed by our authentication provider Clerk (see section 5).
Legal basis: Art. 6(1)(b) GDPR — necessary to provide the service you signed up for.
Conversion data
We store metadata about your conversions: input filename, output format, target device, page count, file size, and conversion status. We do not store the contents of your files beyond what is needed to perform the conversion.
Legal basis: Art. 6(1)(b) GDPR — necessary to deliver your conversion results.
Uploaded files
Files you upload are stored temporarily to perform the conversion. Input and output files are automatically deleted within 24 hours. We do not read, analyse, or share the contents of your files. Files are stored on encrypted cloud storage (AWS S3-compatible).
Legal basis: Art. 6(1)(b) GDPR — necessary to perform the conversion.
Usage analytics
We use PostHog and Umami to understand how the product is used — which features are used, where errors occur, and general traffic patterns. PostHog may set cookies. Umami is configured to be cookieless where possible. Analytics are used solely to improve the service; data is never sold or shared for advertising.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in improving a free service. You can opt out by enabling "Do Not Track" in your browser or contacting us.
Performance and error monitoring
We use Grafana Faro to collect frontend error reports and performance traces. This may include your browser version, operating system, and approximate location (derived from IP address). Individual IP addresses are not stored beyond what Grafana retains in logs.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in keeping the service stable and diagnosing errors.
Technical and log data
Our servers automatically log standard request information: IP address, browser user agent, timestamps, and the pages or API endpoints accessed. These logs are used for security, abuse prevention, and debugging. They are retained for up to 30 days.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in security and infrastructure reliability.
User ratings
If you submit a star rating after a conversion, that rating (1–5) is stored against the conversion record. Ratings are used in aggregate to understand output quality. They are not shared externally.
Legal basis: Art. 6(1)(b) GDPR — you voluntarily provide this as part of using the service.
3. Cookies
We use the following cookies:
- AuthenticationSession cookies set by Clerk to keep you signed in. These are strictly necessary and cannot be declined without disabling your account.
- AnalyticsPostHog sets a first-party cookie (
ph_*) to track sessions across page visits. Umami uses a session cookie where cookies are enabled. You can disable these by enabling "Do Not Track" or blocking first-party cookies in your browser. - Visitor IDWe store a random ID in
localStorage(mgc_visitor_id) to associate your anonymous conversions before you sign in. This is not a tracking cookie — it contains no personal information.
We do not use advertising cookies or cross-site tracking of any kind.
4. How long we keep your data
| Data type | Retention |
|---|---|
| Account (email, name) | Until you delete your account |
| Conversion metadata | Until you delete your account |
| Uploaded & converted files | 24 hours (automatic deletion) |
| User ratings | Until you delete your account |
| Server logs | Up to 30 days |
| Analytics events (PostHog) | Per PostHog retention settings (1 year) |
| Analytics events (Umami) | Per Umami retention settings |
5. Third-party processors
We share data with the following processors under Data Processing Agreements (DPAs). We do not sell data to any third party.
Processes your email and session data to manage sign-in. Clerk Inc. is a US company operating under Standard Contractual Clauses (SCCs) for EU data transfers. Clerk Privacy Policy
Receives usage events (feature interactions, page views, errors). Configured to use PostHog's EU cloud (eu.posthog.com) — data is stored in the EU. PostHog Privacy Policy
Collects anonymised page view counts and referrers. Configured without personal identifiers where possible. Umami Privacy Policy
Receives application logs and performance traces for diagnosing errors. May incidentally contain IP addresses in log lines. Grafana Privacy Policy
Uploaded and converted files are stored temporarily on encrypted cloud object storage. Files are deleted automatically within 24 hours and are not accessible to any third party.
6. International data transfers
Clerk is based in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46 GDPR. All other processors operate primarily within the EU or under equivalent safeguards.
7. Your rights
Under GDPR you have the following rights regarding your personal data:
- Access (Art. 15) — request a copy of all data we hold about you.
- Rectification (Art. 16) — ask us to correct inaccurate data.
- Erasure (Art. 17) — ask us to delete your data. You can delete your account directly in settings, which removes your account and conversion history. Uploaded files are already auto-deleted within 24 hours.
- Restriction (Art. 18) — ask us to pause processing while a dispute is resolved.
- Portability (Art. 20) — receive your conversion history in a machine-readable format.
- Objection (Art. 21) — object to processing based on legitimate interests (e.g. analytics).
- Withdraw consent (Art. 7(3)) — where processing is based on consent, you can withdraw it at any time without affecting prior processing.
To exercise any of these rights, email support@mangaconverter.com. We will respond within 30 days.
8. Right to complain
If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the supervisory authority in your country. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
www.datenschutz-berlin.de
9. Security
All data in transit is encrypted using TLS 1.2+. Uploaded files are stored with server-side encryption at rest. Access to production systems is restricted to the operator. We do not store passwords — authentication is handled entirely by Clerk.
10. Children
MangaConverter is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy as the service evolves. Material changes will be communicated by email to registered users or by a notice on the site. The "last updated" date at the top of this page always reflects the current version.
12. Contact
For any privacy-related questions or data requests: support@mangaconverter.com