1. Privacy Policy
1.1. What I know about you

1. Your IP address
2. Your country based on IP address
3. Your web browser's HTTP header including User-Agent, which includes your operating system, web browser, and device type (mobile or desktop).
4. Your E-Hentai account credentials: ipb_member_id and ipb_pass_hash, granting full access to your account.

1.2. How will your data be logged

The default backend services each run under that platform's own default logging configuration. These defaults (for example, AWS CloudWatch) may record request metadata such as your IP address, and possibly the request payload - which could include the sensitive credentials above. I haven't audited exactly what each platform's defaults capture.

Cloudflare Web Analytics will log your IP address, country and User-Agent information.

1.3. How will I use your data

The web application will forward your E-Hentai account credentials to the chosen cloud provider, which then requests the E-Hentai / ExHentai website to check possible account suspension and retrieve the igneous cookie.

Cloudflare Web Analytics analyzes your data in aggregate, for overall traffic statistics.

1.3.1. Third-party endpoint: excookie.mhdy.net

The frontend also offers an optional third-party API endpoint (excookie.mhdy.net, served from excookie.64396439.xyz). When you select it, your ipb_member_id, ipb_pass_hash and chosen node name are submitted directly from your browser to that third-party service.

This third-party service is provided "AS IS": its website publishes no privacy policy of any kind, and I cannot guarantee that it makes any commitment whatsoever regarding your data - including whether your credentials are logged, stored, shared, or otherwise processed. Do not use this endpoint unless you accept that your credentials are entirely outside this project's control once submitted.

1.4. How will I not use your data

Hacking into your E-Hentai account or selling your E-Hentai account credentials.

Sharing your E-Hentai account credentials with any party other than the chosen cloud platform.

1.5. Change log

1. 3ea38c4 Wed Nov 20 17:43:37 CST 2024 - Initial version: no logging claim, TLS encryption, hosted on Cloudflare Pages.
2. 54a9117 Fri Nov 22 14:45:43 CST 2024 - Reword "this service" to "the default services", hosted on Cloudflare Workers and Google Cloud Run.
3. 4ec635b Sat Nov 23 14:11:22 CST 2024 - Disclose Cloudflare Web Analytics collecting User-Agent and country.
4. 83011d3 Thu Dec 5 20:16:53 CST 2024 - Reword hosting to "many third parties" (no longer just Workers and Cloud Run).
5. 08e1c6c Fri Jul 17 20:20:11 CST 2026 - Full rewrite into numbered sections: what is known (IP, country, User-Agent, credentials), how data may be logged by each platform's defaults (e.g. AWS CloudWatch), how data is used and not used.
6. Tue Aug 18 20:10:00 CST 2026 - Add section 1.3.1 (third-party endpoint excookie.mhdy.net, provided AS IS with no privacy policy on their side, no commitments guaranteed) and this change log, retroactively summarizing every prior revision from the git history.

Last edited: Tue Aug 18 20:10:00 CST 2026