PRIVACY POLICY

Last changed 2026-10-19.

Mango keeps as little about you as it can, and nothing for advertising. This says what is kept, why, where, and for how long.

What we keep

• Your account: the name you sign in with, your email address, when the account was made and when you accepted the terms. Your password is stored only as a salted hash (Argon2) inside your own Mango; nobody can read it back.
• Your Mango: your library, categories, reading progress and history, settings, the stores and extensions you added, tracker sign-ins you made, and the chapters you downloaded. It is used to run your reader and for nothing else; we do not look at it, except where needed to keep the service working or safe.
• When you last signed in, so unused accounts can be warned and removed.
• Billing: if you buy Plus, the customer and subscription ids Paddle gives us, the subscription's status and its period. Your card and address are given to Paddle, never to us.
• Addresses: the IP address a request comes from is used to slow down repeated wrong passwords and floods, and appears in short-lived service logs.

Cookies

Two, both needed to use Mango: one that names your Mango, so the address leads to it, and one that keeps you signed in. No analytics, no tracking, no advertising cookies. The site at this address sets none at all.

Who else handles it

• Paddle, our reseller and merchant of record, for payments, taxes and receipts (Paddle's privacy policy).
• Resend, which sends the few emails Mango writes: links to set a password, and notices about your account.
• Cloudflare, for this site and our domain's names, and for storing our backups, which are encrypted before they leave our server.
• The sources and extensions you choose see the requests made for the pages you open, from our server's address, not yours.

Readers' Mangos run on our own server. Nothing is sold, and nothing is shared beyond what each of these needs to do its part.

How long

• Your account and your Mango: until you remove them, or until an unused account is removed (guests after 3 days, free accounts after 90 days with a warning first).
• Backups: every night, kept up to 30 days, then gone. A removed account is in them for those 30 days at most.
• Service logs: a few days.
• Billing records: as long as the law requires Paddle and us to keep them.

Your choices

• See and take your data: under Settings in Mango, a backup of your library and a zip of your downloaded chapters, at any time.
• Change your email, or remove the account and everything in it, from your account page.
• Ask what we hold about you, or for anything else about your data: [email protected]. We answer within 30 days.

Changes

A change that matters is announced on this page and by email to accounts with one before it applies.