Privacy Policy
Last updated: June 2026
Haliace takes the protection of your personal data seriously. This policy transparently describes what data we collect, why we collect it, how we use it, and what rights you have over it. It applies to all users of the Haliace platform, regardless of their country of residence.
1. Who we are
Haliace is a community platform dedicated to rating, discovering, and sharing manhwa and manhua. As the data controller, we are committed to complying with applicable data protection regulations, including the General Data Protection Regulation (GDPR) for European users, the California Consumer Privacy Act (CCPA) for California users, and any other applicable national legislation.
For any questions regarding this policy, you can reach us via our contact page.
2. Data we collect
2.1 Data you provide directly
- Account data — username, email address, password (encrypted), profile picture, provided when signing up through our authentication partner Clerk.
- Profile data — bio, country of residence, preferred language, custom banner, if you choose to provide them.
- User content — ratings, comments, replies, lists you create, favorited works.
- Communications — messages sent through our contact form.
2.2 Data collected automatically
- Browsing data — pages visited, session duration, links clicked.
- Technical data — IP address, browser type, operating system, screen resolution, browser language.
- Cookies and similar technologies — detailed in section 6 of this policy.
2.3 Data we do not collect
We do not collect payment data directly — this is handled exclusively by our PCI-DSS certified payment partners. We do not collect sensitive data (ethnic origin, political opinions, health data, etc.).
3. Why we use your data
Contract performance
Create and manage your account, allow you to use all platform features (rating, commenting, creating lists).
Legitimate interest
Improve our services, detect and prevent fraud and abuse, ensure platform security, analyze usage to optimize user experience.
Consent
Send you newsletters or marketing notifications if you have explicitly consented.
Legal obligation
Respond to legal requests from competent authorities, comply with our tax and accounting obligations.
4. Sharing your data
We never sell your personal data to third parties. We may share your data only in the following cases:
- Technical providers — Clerk (authentication), Supabase (database), cloud hosting providers. These providers act as data processors and are contractually required to protect your data.
- Payment partners — in case of a subscription or purchase, your payment data is processed by certified providers.
- Legal obligations — if required by law or in response to a valid judicial decision.
- Protection of rights — to protect the rights, property, or safety of Haliace, our users, or the public.
- Business transfer — in the event of a merger, acquisition, or asset sale, your data may be transferred. You would be notified in advance.
5. International data transfers
Some of our providers (Clerk, Supabase) may process your data outside your country of residence. In such cases, we ensure appropriate safeguards are in place (standard contractual clauses or equivalent) to guarantee an adequate level of protection for your data.
6. Cookies and tracking technologies
We use the following types of cookies:
Essential cookies
Required for the site to function (authentication session, security preferences). Cannot be disabled.
Performance cookies
Help us understand how users interact with the site (pages viewed, load times). Anonymized.
Functional cookies
Remember your preferences (language, theme) to improve your experience.
You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the site's functionality.
7. Data retention
8. Your rights
Depending on your country of residence, you have some or all of the following rights:
Right of access
Obtain a copy of all data we hold about you.
Right to rectification
Correct inaccurate or incomplete data about you.
Right to erasure
Request deletion of your data ("right to be forgotten").
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to the processing of your data for marketing purposes.
Right to restriction
Request suspension of processing of your data in certain cases.
Right to withdraw consent
Withdraw your consent at any time for processing based on it.
Right to lodge a complaint
File a complaint with your country's data protection authority.
To exercise your rights, contact us via our contact page. We will respond within 30 days.
9. Data security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Password encryption (bcrypt)
- Data access restricted to authorized personnel
- Regular, encrypted backups
- Continuous monitoring for suspicious access
- Security incident management policy
In the event of a data breach likely to affect your rights, we will notify you within 72 hours in accordance with applicable legal obligations.
10. Protection of minors
Haliace is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately via our contact page.
11. Changes to this policy
We reserve the right to modify this policy at any time. In the event of significant changes, we will notify you by email or via an in-platform notification at least 15 days before they take effect. The last updated date is always shown at the top of this page.
12. Automated decisions and profiling
Haliace uses automated processes to improve your experience:
Rankings and scores
Work rankings are calculated automatically from ratings submitted by users. No human intervention alters these calculations.
Recommendations
Work suggestions are generated algorithmically based on your ratings, your lists, and your browsing history on the platform.
Spam detection
Automated tools analyze suspicious behavior to detect and prevent abuse (artificial votes, spam, multiple accounts).
You have the right to request an explanation of any automated decision concerning you, to challenge it, and to request human intervention. To exercise this right, contact us via our contact page.
13. Region-specific information
Depending on your country of residence, additional rights may apply. Haliace is committed to complying with applicable local regulations.
European Union — GDPR
If you reside in the European Union, the General Data Protection Regulation (GDPR) applies to you. In addition to the rights described in this policy, you have the right to lodge a complaint with the data protection authority of your member state. Processing of your data relies on the following legal bases: contract performance, legitimate interest, consent, or legal obligation, depending on the case.
Primary legal basis: Art. 6 GDPR — Contract performance and legitimate interests.
Switzerland — FADP
If you reside in Switzerland, the Federal Act on Data Protection (FADP) applies. You have the rights of access, rectification, objection, and portability of your data. You may file a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
Brazil — LGPD
If you reside in Brazil, the Lei Geral de Proteção de Dados (LGPD) applies. You have the right to access, rectify, anonymize, port, and delete your data. You may file a complaint with the National Data Protection Authority (ANPD).
United States — CCPA and state laws
If you reside in California or another U.S. state with data protection laws (Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, etc.), additional rights may apply, including:
- Right to know what personal data is collected and how it is used
- Right to request deletion of your personal data
- Right to opt out of the sale or sharing of your personal data (we do not sell your data)
- Right to non-discrimination for exercising your rights
- Right to limit the use of your sensitive data
To exercise these rights, contact us. We will respond within applicable legal timeframes (45 days for CCPA).
Other countries
For all other countries, Haliace is committed to complying with applicable local data protection laws to the extent possible. If you believe your local rights are not being respected, contact us and we will do our best to address it.
14. Cookie policy
This section details our use of cookies and similar technologies (pixels, local storage, etc.).
What is a cookie?
A cookie is a small text file stored on your device when you visit a website. It allows the site to remember your actions and preferences over a period of time.
Cookies we use
__sessionManages Clerk authentication. Required to stay signed in.
__client_uatClerk authentication verification token.
sb-auth-tokenSupabase session token for authenticated requests.
preferencesRemembers your display preferences (theme, language).
Managing cookies
You can control and delete cookies through your browser settings. Note that disabling essential cookies will prevent the site from functioning normally (you will not be able to sign in). Instructions vary by browser:
Search "manage cookies" in your browser's help section for specific instructions.