1. Data on your device

Site shortcuts, URLs, groups, page bookmarks, recent browsing sessions, space names and preferences are stored in app-private storage. Android System WebView manages website cookies, sign-in sessions, local website storage and caches. Separate spaces use independent website storage when supported by the device.

The app has no user accounts or developer-operated configuration sync. Exports go to a location you choose through Android's file picker and include shortcuts, URLs, page bookmarks and space configuration, but not cookies, sign-in credentials or web page content. Your selected cloud drive, recipient or exported file may store that configuration outside the app.

Removing a shortcut does not delete a website account or its sign-in session. You can reset a website space or clear app data in Android settings. Downloads, exports and shared files outside app-private storage must be managed separately.

2. Websites and system features

Websites and their resources receive your browsing requests, IP address, browser information, relevant cookies and content you submit. Searches entered in the app's search box are sent to Google Search. Each website is responsible for its content, accounts, purchases, subscriptions and privacy practices.

Files are selected through the system picker. Camera, microphone and approximate location requests require a website confirmation and the relevant Android permission. You may refuse or revoke permissions in system settings. An authorized website can use the selected files or permitted media and location. Local service suggestions use your system region, not GPS.

After you confirm a download, Android's download service receives the file URL, browser user agent and the relevant website cookies. Sharing and external-app actions provide the chosen destination with the content needed for that action.

Developer configuration and analytics endpoints use HTTPS. Ordinary browsing and downloads also accept user-selected HTTP addresses, so not all website traffic is encrypted. We do not claim additional end-to-end encryption for websites or local data.

3. Updates and page cleanup

The app retrieves site suggestions, page-cleanup scripts and filtering manifests from developer services, and downloads filtering rules from fixed open-source hosts. It selects a domestic or overseas service using the system region. Update requests do not need your current browsing URL, search terms, website account or cookies. Services still receive IP addresses, request times and request metadata needed to deliver and maintain updates.

When filtering is enabled, signed cleanup scripts may read and modify page elements, hide recognized advertising or app-install prompts, and select recognized stay-on-web controls. The currently published script does not actively upload page text, form contents or cookies to developer services. Activating a website control may trigger that website's own requests. Results depend on page structure and available rules.

Open-source hosting services process download requests under their own practices, including the GitHub privacy statement.

4. Usage analytics

During foreground use, the app requests an upload decision from the developer's service to help understand feature use, loading interruptions and errors. This request includes a random installation identifier, system country and language, device brand, Android and app versions, build type, start count and a first-install determination. The identifier is not an account, phone number or advertising ID.

If permitted, the app sends Amplitude a limited set of interaction and performance events, such as screen visits, site-save outcomes, bookmarks, reading features, loading results, error categories and operation timing, together with installation/session identifiers and app/device metadata. Manually recorded app events exclude browsing URLs, site names, search terms, page text, form contents, passwords and cookies.

The analytics configuration disables advertising IDs and location listening and does not record screens or automatically capture text. The developer's service and Amplitude can still observe source IP addresses when connections reach them. Amplitude processes analytics for the developer; see Amplitude's privacy notice.

A refusal or failed policy request does not start the analytics SDK for that decision. Pending events use bounded memory; after approval, the SDK may cache events on the device for retry. The current version has no in-app analytics switch. Running the app again may generate new events, and deleting past data does not itself prevent later collection.

5. Retention and deletion

Local data remains until you remove records, reset the relevant space or clear app data. Uninstalling normally removes app-private data, but does not delete external downloads or exports, website accounts, or data already sent to servers.

Upload-policy request logs are retained for up to 7 days. Amplitude events use a 90-day Time to Live (TTL) measured from receipt. Cleanup is scheduled; initial cleanup after a change and deletion processing may take additional time. Event TTL does not automatically remove installation profiles or associated user properties, which are handled through installation-linked deletion.

To request deletion from the developer's backend and Amplitude, contact gsprin999@gmail.com. In a version with this policy entry, open Settings → Privacy & contact → Copy installation ID, and provide that identifier. Copy it before uninstalling or clearing app data, because the old identifier may become unavailable. The copy action only reads an existing identifier; it does not create one or send an email.

We use the identifier to locate related records and handle verified requests, tracking deletion jobs to completion. Service-provider deletion is not instantaneous. We will explain any further information needed to locate records. Stopping use or uninstalling prevents subsequent events from running that installation; requests already in transit may finish. Contact each website separately about its data or account.

6. Contact and updates

Provider: FlowManga Studio. For support, privacy or deletion requests, email gsprin999@gmail.com. Do not send passwords, cookies, private page contents or unrelated personal information.

This static policy page has no analytics scripts, forms or third-party fonts. Cloudflare processes network requests needed to host and deliver it under its privacy policy. We update this policy and its date when relevant data practices change.