Privacy policy | YafuuGallery

YafuuGallery (“we”) is a small manga reading site run from Thailand. This page explains what we collect when you use it, why, and what you can ask us to do with it. We follow Thailand's Personal Data Protection Act (PDPA).

What we collect

Reading without an account collects nothing about you. When you create an account, we store:

Account details — your email address and a securely hashed password (we never see or store the password itself). If you sign in with Google instead, we get your name, email address and profile picture from Google.
Your profile — your display name, the 4-digit tag that goes with it, and a profile picture if you upload one.
What you do on the site — manga and chapters you favorite, your reading progress and history, comments you post, comments you like, and comments you report.
Sign-in sessions — when you sign in, we record the IP address and browser/device it came from, to keep your session secure.

Why we use it

To run your account: signing you in, keeping your favorites, and remembering where you stopped reading.
To show your display name, tag and picture next to comments you post — those are public.
To email you when you ask for it: verifying your email address and resetting your password. We don't send newsletters or marketing.
To keep the site safe: stopping spam and abuse, and reviewing comments readers report.

We don't sell your data, show ads, or use analytics or tracking tools.

Cookies and browser storage

We use two cookies: one to keep you signed in, and one to remember the language you chose. Your browser also saves a few settings on your own device — light or dark theme, reading mode, recent searches, and which comments you've already seen. These never leave your device and aren't used to track you.

Who helps us run the site

Your data is stored and handled by these services on our behalf, some of them outside Thailand:

Supabase — our database (accounts, favorites, reading progress, comments)
Cloudflare R2 — images and chapter files, including profile pictures
Resend — sends verification and password-reset emails
Google — only if you choose “Sign in with Google”
Our web hosting provider — runs the site itself

They only get what they need to do that job, and we don't share your data with anyone else unless the law requires it.

How long we keep it

We keep your account data while your account exists. You can remove reading history yourself any time from Reading history. When your account is deleted, your profile, favorites, reading progress, comments (and replies to them), likes and reports are deleted with it. A profile picture you uploaded is removed from storage at our next clean-up.

Your rights

Under the PDPA you can ask us to:

give you a copy of the personal data we hold about you
correct it (you can change your display name and picture yourself on your profile)
delete your account and its data
stop or limit how we use it, or object to it

Message us at @yafuuyufaa on Instagram and we'll reply within 30 days. If you're not happy with how we handle it, you can also complain to Thailand's Personal Data Protection Committee (PDPC).

Children

YafuuGallery isn't meant for children under 13, and they shouldn't create an account. If you're under 20, please ask a parent or guardian before signing up. If you think a child has given us their data, message us and we'll delete it.

Changes and contact

If we change this policy, we'll update the date at the top of this page. Questions? Message us at @yafuuyufaa on Instagram.

What we collect

Reading without an account collects nothing about you. When you create an account, we store:

Account details — your email address and a securely hashed password (we never see or store the password itself). If you sign in with Google instead, we get your name, email address and profile picture from Google.

Your profile — your display name, the 4-digit tag that goes with it, and a profile picture if you upload one.

What you do on the site — manga and chapters you favorite, your reading progress and history, comments you post, comments you like, and comments you report.

Sign-in sessions — when you sign in, we record the IP address and browser/device it came from, to keep your session secure.

Why we use it

To run your account: signing you in, keeping your favorites, and remembering where you stopped reading.

To show your display name, tag and picture next to comments you post — those are public.

To email you when you ask for it: verifying your email address and resetting your password. We don't send newsletters or marketing.

To keep the site safe: stopping spam and abuse, and reviewing comments readers report.

We don't sell your data, show ads, or use analytics or tracking tools.

Cookies and browser storage

Who helps us run the site

Your data is stored and handled by these services on our behalf, some of them outside Thailand:

Supabase — our database (accounts, favorites, reading progress, comments)

Cloudflare R2 — images and chapter files, including profile pictures

Resend — sends verification and password-reset emails

Google — only if you choose “Sign in with Google”

Our web hosting provider — runs the site itself

They only get what they need to do that job, and we don't share your data with anyone else unless the law requires it.

How long we keep it

Your rights

Under the PDPA you can ask us to:

give you a copy of the personal data we hold about you

correct it (you can change your display name and picture yourself on your profile)

delete your account and its data

stop or limit how we use it, or object to it

Message us at @yafuuyufaa on Instagram and we'll reply within 30 days. If you're not happy with how we handle it, you can also complain to Thailand's Personal Data Protection Committee (PDPC).