سياسة الخصوصية

Privacy Policy (English)

Last updated: October 11, 2026. This policy explains what Wasan (wasanstaff.xyz), a free website for reading manga and manhwa translated into Arabic, collects about you and why. It matches the Arabic text above.

Reading without an account

All free chapters can be read without an account. Your reading position is then kept only in your own browser (local storage) and is never sent to us.

Data we collect when you have an account

Your email address; the username and name you choose, the bio, profile picture and cover you choose to add, and your profile visibility. When you complete your account we ask for your date of birth and gender: neither is shown to anyone, and we use them to check your age and to understand our readers in aggregate. You also choose your country (we suggest it from your connection without storing your IP address) and set a password. Every account has a member number shown on its profile. Then what you do on the site: the works you add to your library or follow; your reading progress and history; and your notification preferences and notifications. We store only your password's hash, never the password itself.

Google Sign-In

If you choose to sign in with Google, we request only the openid and email scopes. From Google we receive your email address, Google's confirmation that it is verified, and a stable account identifier. We do not request your name, photo, contacts or any other Google data, and we never access Gmail, Drive or other Google services. We use this data only to sign you in and link the sign-in to your Wasan account. We do not sell it, share it, or use it for advertising.

Wasan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Email code sign-in

If you sign in by email, we send a one-time code to your address. The address is stored encrypted in the sign-in request, the code is stored only as a hash, and the request expires within minutes.

Security and cookies

We use one essential, HTTP-only session cookie (wasan_session) and a short-lived cookie that ties a Google sign-in step to your browser. We use no tracking or advertising cookies. To stop password-guessing style abuse we count sign-in attempts using hashed values of your email and IP address, which expire shortly. Session tokens are stored hashed, and staff two-factor secrets are stored encrypted.

Analytics

We record events such as opening a chapter or reading progress with the work and chapter IDs and a random session ID only, with no email, name or IP address, to learn what is read and improve the site.

Team payout methods

If you are a team member and save a payout method, we store its type and the details you enter, together with monthly earnings statements. Only you and the site owner can see the payout details for manual transfers. Team leaders can see shares and statements without those details. We record when the method changes and notify you on the site; payout details are never included in the audit log.

How we use your data

To run your account: signing in, showing your library, syncing reading progress across your devices, notifying you about new chapters, and protecting the site from abuse. We do not sell your data, use it for targeted advertising, or make automated decisions about you with it.

Who we share it with

Only with service providers that work on our behalf, and only as needed: Amazon Web Services (server and database hosting), Cloudflare (site delivery, image storage and encrypted backups), Resend (sending sign-in code emails), and Google (when you choose Google Sign-In). We disclose it to no one else unless the law requires it. The site shows no ads today; if we add them, we will update this page first.

Retention and deletion

We keep your account data while your account exists. To delete your account and its data, or to get a copy, email [email protected] from the address on your account; we complete requests within 30 days. Deleted data may remain in encrypted backups until they rotate out, and is used only to restore service after a failure. You can also remove Wasan's access from the security page of your Google Account.

Children

The site is not directed at children under 13, and we do not knowingly collect their data. If you learn that a child created an account, contact us and we will delete it.

Contact and changes

For any privacy question, email [email protected]. If we change this policy we update the date above and notify account holders of material changes.