Privacy Policy

Pornhwa Database is an adult-only community database and discovery site. This policy explains how I handle information when you browse, create an account or contribute.

I collect the following information:

• Account details, including your email if you provide one, username, linked sign-in identities and preferences, to manage your account.
• Information you save or submit, such as reading progress, notes, favorites, lists, tier lists, ratings, reviews, comments and uploads, to provide these features and publish your contributions.
• Series visits, browser identifiers and timestamps to count views and calculate trends. Visits may be linked to your account when you are signed in.
• API key records and request activity, including IP addresses and browser or client information, to authorize API access, measure usage and enforce limits.
• Survey choices, optional written responses and survey-specific browser identifiers to collect feedback and limit repeat prompts and responses. Survey records are not linked to your account.

Your username, public profile details and public contributions are visible to other visitors. These include reviews, ratings, approved submissions and public lists or tier lists.

Your tracking visibility setting controls whether your reading list appears on your profile. Entries marked private do not appear in public tracking. Private lists do not appear in public listings.

Your visibility settings control whether linked provider profiles are shown. When you link AniList from your account, its profile is public by default. You can hide it in settings.

An API key with library permissions can access your private library data. Keep your key confidential and revoke it if it is exposed.

To prevent spam and investigate rating manipulation, the site records signup attempts and authenticated actions. Records can include account identifiers, timestamps, a security cookie, protected hashes of IP addresses and network groups, country and network information, and a browser fingerprint identifier.

Authorized administrators use this information to investigate abuse. A browser fingerprint alone does not determine a ban. Pending or excluded contributions do not appear in public ratings and reviews.

The fingerprint library runs in your browser with vendor monitoring disabled. CrowdSec runs locally and uses signup-abuse logs that contain IP addresses.

The site uses cookies for sign-in, security checks, view counting, language preferences and survey participation. The security cookie lasts 90 days. View and survey identifiers last up to one year.

Your browser also stores preferences such as your age confirmation, theme, search history and display settings. You can clear cookies and browser storage through your browser settings, but this may sign you out or reset preferences. Advertising services may use their own cookies and similar technologies.

• Firebase/Google manages authentication. Discord and AniList support optional sign-in and account linking. The site does not keep their OAuth access tokens.
• Cloudflare provides image delivery, analytics, performance and security services, including Turnstile checks and network information used to prevent abuse.
• Ko-fi provides the embedded donation form and handles payment information through its payment providers.

These services handle information under their own privacy policies and may process it outside your country. If you contact me through Discord, Discord also receives your message and account information.

• Individual series-view records are scheduled for deletion after 14 days. Aggregate view counts remain.
• Detailed participation events are retained for up to 90 days. Local signup-abuse logs are removed after seven days.
• Survey browser records and written responses are deleted after anonymous totals are finalized, 90 days after the survey closes.
• I keep account information and saved content to operate your account and the community database. Moderation decisions and affected contributions are kept separately so they can be reviewed and restored. I also keep protected identifiers used to enforce provider bans and prevent ban evasion.

You can manage your profile, privacy settings and saved content through your account and export your reading tracking data. To request access to your information, ask for a correction or deletion, or raise a privacy concern, contact me through Discord.

I handle each account deletion request individually. Deleting an account does not necessarily remove approved database edits or moderation records. Contact me about specific contributions you want removed.

I will update the date on this page when this policy changes.