California residents

California privacy rights (CCPA / CPRA)

Effective date: May 2, 2026 · Last updated: May 2, 2026

This notice supplements our Privacy Policy for California residents as required by the California Consumer Privacy Act (CCPA) as amended by the CPRA. It is a summary, not legal advice.

1. Who this applies to

  • California residents using Ctoons where the CCPA/CPRA applies.

2. Categories of personal information

Depending on how you use Ctoons, we may collect the categories below (not every category applies to every user):

  • Identifiers — for example account IDs, email if you provide it, or OAuth subject identifiers from Supabase Auth.
  • Commercial information — for example donation or payment records processed by Dodo Payments.
  • Internet or other electronic network activity — for example reading progress, in-app events, and (if you opt in to analytics cookies) events relayed to PostHog through our first-party API.
  • Geolocation data — approximate location inferred from IP may appear in server or CDN logs from our hosting provider.
  • Inferences — for example content or feed preferences inferred from usage.

See the Privacy Policy for retention, security, and transfers. We do not collect sensitive personal information categories for the purpose of inferring characteristics beyond what is needed to operate the Services.

3. Sale, sharing, and service providers

  • We do not sell personal information for monetary or other valuable consideration as commonly understood under the CCPA/CPRA.
  • We do not share personal information for cross-context behavioral advertising (as defined by the CPRA). PostHog is used for product analytics and service improvement, not for selling data or cross-context ads.
  • We disclose personal information to service providers and subprocessors that help us run the Services—currently including Supabase (auth, database, storage), Dodo Payments (payments), Resend (email when configured), PostHog (analytics when you opt in to analytics cookies and analytics is enabled for the deployment), our hosting provider, and infrastructure required for web push—under contractual or statutory safeguards appropriate to their role.

4. Your California rights

  • Right to know what personal information we collect, use, and disclose.
  • Right to delete personal information we hold, subject to exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of "sale" or "sharing" of personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising; see section 3 above.
  • Right to limit use of sensitive personal information where applicable.
  • Right to non-discrimination for exercising these rights.

5. How to submit a request

  • Email hello@ctoons.app with subject "California privacy request" and describe your request. We may verify your identity before fulfilling it.
  • You may designate an authorized agent under applicable rules; we may require proof of authorization.

6. Shine the Light

California's "Shine the Light" law (Civil Code § 1798.83) may grant additional rights for certain disclosures to third parties for direct marketing. Our Privacy Policy describes sharing; contact us if you believe this applies.

7. Related