Privacy Policy & GDPR

This policy describes how we collect, use, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR — EU 2016/679).

1. Data Controller

My Comics Collection — Email: hello@mycomicscollection.com

2. Data We Collect

As part of your use of our service, we collect the following data:

• Account data: email address, password (hashed), interface preferences
• Collection data: information about your comics (issues, series, prices, conditions)
• Navigation data: access logs, IP address (security only)
• Billing data: handled by our secure payment provider

3. Legal Basis and Purposes

Processing is based on contract performance (Art. 6(1)(b) GDPR) for service delivery, and on your consent for marketing communications.

4. Data Retention

Your data is retained for the duration of your subscription, then for 3 years after termination for accounting and legal purposes.

5. Your Rights

In accordance with GDPR, you have the following rights: access, rectification, erasure, portability, restriction, objection. To exercise these rights: hello@mycomicscollection.com

6. Transfers and Subprocessors

Your data is hosted in Europe. We neither sell nor rent your data to third parties. Our subprocessors (hosting, payment) are subject to equivalent safeguards.

7. Cookies

See our Cookie Policy for details on the trackers used.

8. DPO Contact

For any question regarding your data: hello@mycomicscollection.com

9. Google Analytics 4 (audience measurement)

We use Google Analytics 4 (GA4) to measure site audience and improve the user experience. Measurement ID: G-KLWS3X63GK.

Data collected by GA4:

• Pages visited, session duration, bounce rate
• Traffic source (search engine, social network, direct link)
• Device type, browser, operating system, language
• Country and approximate city (based on IP, never the exact address)
• Conversion events: clicks on CTAs, PDF downloads, pricing page views, newsletter form submissions
• AI referrers: detection if you arrive from ChatGPT, Perplexity, Bing Copilot, Claude, Gemini, You.com or DuckAssist (used to measure AI Search Engine impact, no personal data transmitted)

Custom events we track: cta_click, cta_view, cta_estimation_click, cta_signup_click, trial_signup_intent, pricing_view, pricing_direct_visit, feature_view, pdf_download, popup_view, email_capture, ai_search_referral.

Our GA4 configuration features:

• IP anonymization: enabled by default in GA4 — your IP address is never stored in full
• No personally identifiable information is sent to Google (no name, email, password)
• Retention period: 2 months (the shortest GA4 default setting)
• Data sharing with Google: disabled (no signal sharing, no advertising features)
• Hosting: Google servers (US and EU regions under European Standard Contractual Clauses)

Legal basis: your consent (Art. 6(1)(a) GDPR), collected via the cookie banner on your first visit. You can withdraw this consent at any time via the "Manage cookies" link in the footer.

Your rights specific to Google Analytics:

• Refuse tracking via our consent banner
• Install the Google Analytics Opt-out browser add-on
• Enable the "Do Not Track" mode in your browser

Reference: see Google's privacy policy and the GA4 data collection details.