Skip to content
ComicAdda

Privacy Policy

Last updated: April 27, 2026

The Short Version

We collect only what we need to run ComicAdda. We don't sell your data. We don't show you targeted ads. We use your information only to provide and improve the ComicAdda service and related features, including comedian verification. That's it.

Who We Are

ComicAdda (comicadda.com) is India's standup comedy discovery and tracking platform. The data controller for this service is ComicAdda, based in India.

You can contact us at privacy@comicadda.com.

What We Collect

When you create an account:

  • Your email address
  • Your display name and profile information you choose to share
  • If you sign in with Google: your name, email address, and profile photo from your Google account

When you use ComicAdda:

  • Videos you mark as watched, liked, or rated
  • Comedians you follow
  • Lists you create
  • Reviews you write

If you claim a comedian profile (YouTube OAuth):

We request read‑only access to limited YouTube account information to verify that you own or manage the YouTube channel associated with the comedian profile you are claiming.

This includes:

  • YouTube channel ID
  • Channel title
  • List of channels you own or manage

We request only the https://www.googleapis.com/auth/youtube.readonly scope. We cannot upload, delete, modify content, or post on your behalf.

Google API Services User Data Policy — Limited Use Disclosure

ComicAdda's access to and use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • Google user data is used only to provide the YouTube‑based comedian verification feature requested by you
  • Google user data is not used for advertising, cross‑context behavioral advertising, marketing, profiling, or analytics unrelated to the verification feature
  • Google user data is not sold or shared
  • Google user data is not transferred to data brokers or advertisers
  • Human access to Google user data is strictly limited. No personnel may access Google user data, except:
    • With your explicit consent
    • For security incident investigation
    • To comply with applicable law
    • When the data has been aggregated and anonymized

YouTube data obtained via OAuth is used only during the verification flow. We store only the verified YouTube channel ID linked to your comedian claim record. OAuth access tokens and refresh tokens are not retained beyond the immediate verification process.

You may revoke ComicAdda's access to your Google account at any time through your Google Account permissions page.

How We Share Your Data

We do not sell, rent, or trade your personal data, and we do not share personal data for cross‑context behavioral advertising.

We share limited personal data only with trusted service providers acting on our behalf and solely for operating, securing, and supporting ComicAdda. These providers process personal data under contractual obligations requiring:

  • Use only on ComicAdda's documented instructions
  • Confidentiality
  • Appropriate technical and organizational security measures

Service providers include:

  • Supabase — database hosting and authentication services
  • Cloudflare — website delivery, DNS, DDoS protection, and web application firewall services
  • Google LLC — OAuth authentication and YouTube API access for sign‑in and comedian verification
  • Resend — delivery of transactional and newsletter emails

Where personal data is processed outside India or your country of residence, we rely on appropriate contractual and technical safeguards (such as data processing agreements) to ensure an equivalent level of data protection.

We may also disclose personal data if required to do so by applicable law, regulation, legal process, or a valid governmental request.

Data Security

We implement appropriate technical and organizational safeguards to protect personal data, including authentication data and any sensitive personal information, against unauthorized access, loss, misuse, or alteration.

These measures include:

  • Encryption in transit: TLS 1.2 or higher
  • Encryption at rest: AES‑256 for stored data
  • Authentication security: OAuth tokens handled server‑side only and not persisted beyond verification
  • Access controls: Database row‑level security and least‑privilege access
  • Application security: No passwords stored by ComicAdda; Supabase Auth uses bcrypt and short‑lived, HttpOnly, Secure, SameSite cookies
  • Infrastructure protection: Cloudflare DDoS mitigation and Web Application Firewall

Access to personal data is restricted to authorized personnel and service providers with a legitimate operational need.

Data Retention

Personal data is retained for as long as your account remains active and for as long as necessary to provide the service. Upon account deletion, personal data is deleted or anonymized within 30 days, unless retention is required to meet legal or regulatory obligations.

Google OAuth and YouTube API data is retained only for the duration necessary to complete the verification purpose. You may revoke access at any time via your Google Account permissions.

Your Rights

Depending on your location and applicable law (including GDPR and CPRA), you may have the right to:

  • Access or portability of your personal data
  • Correction of inaccurate or incomplete data
  • Deletion of your personal data
  • Restriction or objection to certain processing activities
  • Opt‑out of sale or sharing of personal data (note: ComicAdda does not sell or share personal data)
  • Non‑discrimination for exercising your privacy rights

You can exercise these rights by emailing privacy@comicadda.com. We will verify your request and respond within the timeframe required by applicable law.

You may also:

Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at privacy@comicadda.com.