Privacy Policy
This policy explains what data we collect through the INKtoon website and the INKtoon mobile application, why we collect it, who we share it with, and what control you have over it.
1. Who we are and how to reach us
The controller of the personal data described in this policy is Mediabox LLC, a company registered in the State of Wyoming, United States under registration number 2017-000746900, with its registered office at 109 E 17th St, STE 430, Cheyenne, WY 82001, United States.
Privacy enquiries and requests: support@mediaboxllc.com. We aim to acknowledge every request within 2 business days.
If you are in the European Economic Area or the United Kingdom, you can raise any question about this policy, or exercise any of the rights set out in section 7, by writing to support@mediaboxllc.com.
2. What this policy covers
This policy applies to:
- this website and any landing pages served on the same domain, and
-
the INKtoon mobile application for iOS and Android, distributed on the
App Store (
id6761719008) and on Google Play (com.comicverse.reader).
It does not apply to the App Store or Google Play themselves, or to any third-party website you reach by following a link from ours. Where a section applies to only the website or only the application, it says so.
3. What we collect, why, and on what basis
3.1 Website
| Data | Purpose | Legal basis (GDPR / UK GDPR) | Retention |
|---|---|---|---|
| IP address, user agent, device and browser type, referring URL, pages and time of access | Serving the site, security, detecting and preventing abuse and automated traffic | Legitimate interests (Art. 6(1)(f)) | 30 days |
Advertising click identifiers (gclid,
gbraid, wbraid) and campaign parameters
(utm_*)
| Measuring which advertising campaign led to an app install, and reporting that install as a conversion | Consent (Art. 6(1)(a)) | Session, then up to 14 months in aggregate reports |
| Analytics and advertising cookies (see section 8) | Audience measurement and advertising performance reporting | Consent (Art. 6(1)(a)) | Up to 24 months |
| Your email address and the content of your message | Answering the request you sent us and keeping a record of it | Legitimate interests (Art. 6(1)(f)) | 24 months |
Nothing in the analytics or advertising rows above is collected before you accept in the consent banner. Until then, all measurement storage is set to denied through Google Consent Mode. Declining does not restrict access to any part of this site.
3.2 Mobile application
| Data | Purpose | Legal basis (GDPR / UK GDPR) | Retention |
|---|---|---|---|
| Advertising identifier, device model, operating system version, install referrer, coarse country derived from IP | Attributing the install to the campaign that produced it, detecting install fraud | Consent (Art. 6(1)(a)) | Up to 14 months |
| Crash reports and diagnostic logs | Finding and fixing defects | Legitimate interests (Art. 6(1)(f)) | 90 days |
| In-app activity: titles opened, reading progress, library contents, search terms, genre preferences | Providing the reading features themselves, and ordering recommendations | Performance of a contract (Art. 6(1)(b)) | While the account or installation exists |
| Account identifier and email address, if you create an account | Authenticating you and syncing your library and progress across devices | Performance of a contract (Art. 6(1)(b)) | While the account exists; deleted within 30 days of a deletion request |
The application does not collect precise location, contacts, calendar, photos, microphone or camera data, and does not read SMS or call logs.
4. Recommendations and automated processing
The order in which titles are suggested to you is generated automatically from the genres and titles you have read. This is ordinary content ranking: it produces no legal effects and has no similarly significant effect on you within the meaning of Article 22 GDPR, and you can ignore the suggestions and browse the catalogue directly at any time.
5. Who we share data with
We do not sell personal data and we do not share it for cross-context behavioural advertising other than as described below. We use the following processors and recipients, each engaged under a written data processing agreement:
| Recipient | Role | What it receives |
|---|---|---|
| AppsFlyer Ltd. (Israel / EU / US) | Mobile attribution and marketing analytics | Device and advertising identifiers, install referrer, campaign parameters |
| Google LLC / Google Ireland Ltd. — Google Analytics 4 | Audience measurement | Cookie identifiers, IP address, page and event data |
| Google LLC / Google Ireland Ltd. — Google Ads | Advertising delivery and conversion measurement | Click identifiers, conversion events |
| Google LLC — Google Play | App distribution | Whatever Google collects as its own controller under Google's privacy policy |
| Cloudflare, Inc. (United States) | Website hosting and content delivery | IP address and request metadata, processed to serve the site and to protect it against attack |
We may also disclose personal data where we are required to do so by law or by a valid order of a competent authority, where it is necessary to establish, exercise or defend legal claims, or in connection with a merger, acquisition or sale of assets — in which case we will notify you before your data becomes subject to a different privacy policy.
6. International transfers
Some recipients listed above process personal data outside the European Economic Area and the United Kingdom, including in the United States. Where that happens we rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, on an adequacy decision where one applies, or on another lawful transfer mechanism under Chapter V GDPR. A copy of the relevant safeguards is available on request from support@mediaboxllc.com.
7. Your rights
Subject to the law that applies to you, you have the right to request access to your personal data, to have inaccurate data corrected, to have your data deleted, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
7.1 European Economic Area and United Kingdom
These rights arise under Articles 15 to 22 GDPR and the UK GDPR. You may also lodge a complaint with your national supervisory authority, or in the United Kingdom with the Information Commissioner's Office. We would ask you to raise the matter with us first so that we have a chance to resolve it.
7.2 California
Under the CCPA as amended by the CPRA you have the right to know what personal information we collect and for what purpose, to request its deletion, to correct inaccurate information, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. The categories we collect are identifiers, internet or network activity information, commercial information about the content you read, and inferences drawn to order recommendations. We disclose these categories to the service providers listed in section 5 for the purposes stated there. We do not sell personal information, and we do not knowingly collect or share the personal information of consumers under 16.
7.3 Other US states
Residents of states with comprehensive privacy statutes, including Virginia, Colorado, Connecticut, Utah and Texas, have broadly equivalent rights of access, correction, deletion, portability and opt-out, and a right to appeal a refused request. To appeal, reply to our decision and mark your message "Appeal".
7.4 How to exercise a right
Email support@mediaboxllc.com from the address associated with your request, or describe the installation concerned. We may ask for information needed to verify who you are — no more than is necessary for that purpose. We respond within the period required by the applicable law, and in any case within 30 days; where a request is complex we may extend that period once and will tell you if we do. Exercising these rights is free unless a request is manifestly unfounded or excessive.
8. Cookies and similar technologies
The website uses cookies, localStorage and
sessionStorage. Each one, what it does, how long it lasts and
how to change your choice is listed in our
Cookie Policy. Where your browser sends a Global
Privacy Control signal, we treat it as an opt-out of advertising cookies.
9. Children
INKtoon is rated 16+ on Google Play and is not directed to children under 13. We do not knowingly collect personal data from children under 13, and where the GDPR applies we do not rely on a child's consent below the age set by their member state, which is between 13 and 16. If you believe a child has provided us with personal data, write to support@mediaboxllc.com and we will delete it without undue delay.
10. Security
Data is transmitted over TLS and stored on infrastructure protected by access controls, least-privilege administration and logging. Access to personal data inside our organisation is limited to people who need it for the purposes described in this policy. No system is perfectly secure, but we maintain technical and organisational measures appropriate to the risk, and we review them periodically.
Where a personal data breach is likely to result in a risk to your rights and freedoms, we notify the competent supervisory authority within 72 hours of becoming aware of it and inform affected individuals without undue delay where the law requires.
11. Retention
We keep personal data only as long as needed for the purpose it was collected for, as set out in the tables in section 3, and then delete it or irreversibly aggregate it. Where we are required to retain records for longer — for example to comply with accounting or legal obligations — we retain only what that obligation requires.
12. Changes to this policy
If we change this policy, we update the date at the top of the page. Where a change materially affects how we use personal data, we give notice in the application or on this website before it takes effect, and where the law requires it we ask for fresh consent.
13. Contact
Mediabox LLC
109 E 17th St, STE 430, Cheyenne, WY 82001, United States
support@mediaboxllc.com