PANELGLOT

Privacy

Last updated: 24 October 2026

This policy describes what the Panelglot app and its translation service handle. A short privacy summary is available in the app under You › Privacy & account.

What leaves your phone when you translate

Translation requests do not include your name, email, library or reading history.

Who translates

Depending on language, plan, available capacity and configured keys, the translation service may send prompt content to OpenRouter, Oxion AI, Qwen Cloud, Z.ai, Google Gemini, Intern AI (Shanghai AI Laboratory; servers in China), Groq, NVIDIA NIM, IteraCompute, TokenHarbor, BeatAPI, River or Experiential Labs when that optional route is enabled. In addition to the text being translated, a prompt may include recognized text from nearby pages, earlier translations from the chapter, applicable glossary terms, source and target languages, style, and, for public online sources only, the series title when supplied. Local imports and personal Komga titles are omitted. The source page and cover URLs, account identity and install id stay with Panelglot's service and are not sent to AI providers; page images are not sent. Oxion AI says it does not store prompt or response content, but forwards requests to the upstream provider serving the selected model; that provider's retention policy applies. Some free tiers may retain prompts or use them to improve models. Do not translate private text you would not want a provider to see. Oxion AI privacy policy.

What we count

For translation requests, the service may store a hashed chapter reference per install and day to calculate chapter-ad eligibility for compatible older builds. This Android build contains no advertising SDK, shows no ads and sends no advertising-id or ad-view events. Service counters also include translated pages and failures; the owner's dashboard shows aggregates and hashed identifiers. Translation failure logs and metrics use safe error categories; they do not include recognized page text, model output or raw AI-provider error bodies.

Network address and abuse prevention

Cloudflare provides the request's IP address to the translation Worker. The Worker uses it for per-IP rate limits and to temporarily block repeated invalid requests. Rate-limit counter entries expire within 48 hours and are periodically removed. Block records carry an expiry: automatic abuse blocks default to one hour, and an owner may set a block for up to 365 days. Expired block records are removed when they are next checked or during periodic cleanup.

On your phone

Text recognition uses ML Kit on your phone and may also use PaddleOCR as an on-device fallback. If model downloads are enabled, the app downloads verified text-recognition and page-detection models from Hugging Face. These downloads contain no comic pages or recognized text; Hugging Face may receive your network address. ML Kit may send anonymous usage statistics to Google. When allowed, offline translation may download Google ML Kit language models (about 30 MB per language pair); Google may receive your network address for these downloads. They contain no comic pages or recognized text. Turning model downloads off blocks new requests, but a download already underway may finish and downloaded models stay on the phone. Pages and chapters always come directly from your own source, never through us. The app has no analytics SDK or trackers, and a crash log stays on your phone until you choose to share it.

Google sign-in

If you sign in, we keep your Google account id, email, name and picture address to manage your plan and keep the service safe. Signing out clears the session on this phone immediately and asks the service to unlink this install; if the service cannot be reached, the server link may remain. Delete my data removes this install's link and server data. The account record is removed only after its last linked install is deleted; other linked installs keep access to shared account data.

Optional library backup

When you turn it on, a private compressed snapshot of your online-source library entries, reading records, categories, allowed translation settings and source list is stored in Cloudflare, encrypted at rest with server-managed keys (not end-to-end encrypted). Local-source library entries, downloaded images, local files, passwords, source logins and tokens are excluded. Existing snapshots created before local entries were excluded may still contain their metadata until replaced or deleted. You can pause, restore or delete it in the app. The backup is erased when the account record is removed after its last linked install is deleted; other linked installs keep access to it.

Community

Only where community features are switched on for you: what you choose to publish (handle, display name, bio, avatar or optional profile photo, comments and ratings). Profile photos are resized and stripped of location and camera data, reviewed before others see them, and deleted when you remove them or your account.

Ads

This Android build has no advertising SDK and displays no ads. It does not send advertising IDs or ad-view events. The service may retain hashed chapter references for compatibility with older builds.

Erasing your data

In the app: You › Settings › Translation › Delete my data requests deletion of this install's server records, private translations and glossary for local files and its personal Komga library, plus its local saved translations and rendered pages. Shared translations for online sources stay available to readers. If other installs remain linked to the same account, their shared account data and library backup remain available to them. If server deletion cannot be confirmed (for example, because the service is unavailable), local data is still erased, but server deletion may not complete; the app reports a partial deletion.

Contact

Questions or requests: hello@panelglot.com