Website image translation and guest trials
The website accepts JPG, PNG and WebP images. Original files, translation inputs, complete results and history are stored in this browser’s IndexedDB, not synced across devices. Clearing site data removes them. “Delete local record” removes only the local copy, not server tasks or audit records.
Guest trials use Cloudflare Turnstile. Cloudflare processes browser and network signals needed for verification under its privacy policy; our verification requests do not include comic images. We use a secure HttpOnly session cookie lasting up to 30 days, HMAC network identifiers and daily counters retained for seven days to prevent abuse. These identifiers are pseudonymous, not a guarantee of complete anonymity.
Guest server results can be retrieved for 24 hours after a task ends, then access is revoked and files are reclaimed. Saved local results remain available. Inputs are removed at task completion; necessary task, cost and security records follow their respective retention rules. The result retention period below applies to registered accounts. Guests do not create an identity-provider account; signing in does not merge history. The default trial accepts up to five new images daily, with shared-network limits; failures also count.
Scope and contact
This policy covers the NodeLane Comics website, extension, reader and translation services, maintained by the NodeLane Comics team. Contact comics@nodelane.net about privacy, access, correction or deletion. Updated 2026-10-30. Material changes will be explained on this page and communicated appropriately.
Information and purposes
OIDC sign-in provides an identity identifier, display name and role for accounts, benefits and tasks. The product API validates access tokens. The website does not collect the password you enter at the identity provider.
Translation processes selected page images, content hashes, file/page identifiers, mode, target language, status, results and usage records. These support delivery, matching, recovery and valid result reuse. Stripe or Creem handles checkout and full payment-card details; we retain the customer, transaction and subscription records needed for benefits, reconciliation and support.
Feedback, email and necessary attachments help investigate problems. Operations involve necessary request metadata, security and error records. Default logs exclude credentials, private images, full image text and signed download URLs.
Optional extension usage analytics
Usage analytics is off by default. If you opt in through the extension settings, limited information about feature use, success and failure categories, active reading time, interface and target languages, source types and extension version is sent through NodeLane's backend to Google Analytics 4 to improve the product. A random identifier stored on your device distinguishes usage. It is not linked to your signed-in account or used for ad targeting. This is a pseudonymous identifier, not a promise of complete anonymity.
Analytics excludes comic titles, images and text, search terms, file names, specific reading URLs, cookies, credentials and custom translation service addresses. You can turn it off at any time to stop further collection and clear pending local analytics records and the identifier, without affecting reading or translation. Turning it off does not automatically erase data already sent to Google; contact us for requests we can identify and process. Google may process analytics data outside your region, subject to its privacy policy and our retention settings. GA4 event-level and user-level data retention is set to 14 months, without resetting user data retention on new activity; aggregate reports are not limited by this period. The website itself does not collect GA4 usage analytics.
Permissions and local storage
The extension declares access to all HTTP/HTTPS websites and image domains at installation, without requesting access site by site or domain by domain during use. You can still restrict access in the browser’s extension settings; affected features may stop working until you restore access to all websites and retry. Source-site cookies, login tokens and browsing history are not uploaded to NodeLane. Remote library authorization and MTU passwords and tokens are stored on this device and sent only to their configured service as needed; removing a connection removes its saved credentials. Saving passwords and reconnecting with a blank password require extension 0.10.2 or later; earlier versions require the password on each reconnection.
The shelf, reading positions, preferences and imported files stay in the browser; the whole shelf is not automatically synced. When connected to an OPDS library that supports a reading-progress interface, the extension can sync reading positions with that library. This is synchronization with the source library, not NodeLane cloud synchronization. Website sign-in and access/refresh tokens persist in localStorage, with sign-in changes shared across tabs in the same browser. Temporary authorization-flow state uses sessionStorage. Website sign-out clears its local session, not the extension or identity-provider session. Clearing site data can remove sign-in and local history.
Service providers and transfers
Translation processing may involve detection/OCR, text models, local background repair and typesetting. Text providers process the recognized text needed for translation. Actual providers are configured on the server for the task.
Single-image translation: Translation images use private files on the central server; recognized text, translations and necessary metadata are stored in the database. Identity, infrastructure, translation and payment services process data as needed, under their applicable policies. Processing may occur outside your region. We do not sell personal information or use submitted comics for ad targeting. We do not promise all providers retain nothing or never use data for training; this depends on the provider and agreement. Do not submit unauthorized or unsuitable sensitive content.
Retention and deletion
Single-image translation: Originals are temporary files on the central server and compute nodes, deleted after a task completes, fails or is cancelled. Translation keeps overlay files. Private single-image results for registered accounts are kept for 7 days after task completion by default, configurable by the administrator. After expiry, server access is revoked and files are reclaimed; saved local results are unaffected. Recognized text, translations and necessary metadata are stored in the database.
Single-image translation: Results are reused only within the same account when content, mode, language and effective configuration match and a valid request remains. Originals and results are not shared across users. The browser combines overlays with its own original image; the server does not keep permanent original copies. Deleting a translation record immediately revokes that request’s server access. Other valid requests in your account remain usable; the result file is removed after the last valid request is revoked. Downloaded or cached copies may remain on your device until you clear them.
For account or broader deletion requests, contact us for identity and scope verification. Transaction, audit or security records may need retention for service obligations, disputes or applicable requirements. No single erasure deadline is promised for all records; the response will explain the outcome and constraints.
Security, choices and minors
Single-image translation: The central server checks account authorization and returns result files directly, without issuing short-lived signed download links. Provider keys stay on the backend. Protect your account and device, and do not share access tokens. You may restrict website access in the browser’s extension settings, stop translation, sign out or remove local browser data; necessary functionality may then be unavailable. The website has no advertising trackers or third-party analytics scripts.
Minors should use the service with appropriate guardian knowledge and guidance and obtain necessary authorization for subscriptions. Do not submit children’s sensitive personal information. Guardians may contact us to request verification and handling of inappropriate processing. Report security concerns using necessary, redacted information only; passwords and tokens are not needed.
Whole PDF / ZIP / CBZ translation
Whole-document translation requires sign-in. Selected PDF / ZIP / CBZ files upload directly to private Cloudflare R2. Compute nodes read, parse, recognize and render pages; text models process the necessary recognized text. R2 stores inputs and the complete translated-image ZIP; the database stores tasks, text and usage. Uploads and downloads use time-limited signed URLs. Do not share them; issued URLs may remain usable until expiry.
Documents have separate retention, not the single-image overlay rules. By default, uploads must finish within 1 hour and uploaded but unstarted files expire after 24 hours. Inputs for active or unresolved tasks may remain for recovery. Terminal inputs and failed outputs are scheduled for cleanup after a default 1-hour delay; successful ZIPs remain for 7 days by default. Use the expiry shown on the task. Node temporary files follow recovery and cleanup procedures; necessary task, billing and security records are retained separately. Server downloads expire; downloaded copies remain under your control.