Notis Privasi

Dikemas kini 18 Oktober 2026

Draf. Nama pengawal data (nama perniagaan berdaftar) dan emel hubungan akan ditambah sebelum pelancaran.English version below.

Ringkasan

Anda boleh membaca Lipur tanpa akaun. Akaun adalah pilihan, dan kami hanya menyimpan data yang perlu untuk menyegerakkan bacaan anda, memaparkan komen dan menghantar notifikasi yang anda minta. Tiada iklan, tiada kuki penjejakan dan data tidak dijual.

Tanpa akaun: data pada peranti anda sahaja

Tetapan bacaan (tema, saiz huruf, fon) dan kedudukan bacaan terakhir disimpan dalam storan tempatan pelayar anda (localStorage). Data ini tidak dihantar kepada kami. Anda boleh memadamnya dengan mengosongkan data laman dalam pelayar.

Jika anda mencipta akaun

Nama paparan yang anda pilih (dipapar pada komen anda).
Kata laluan (pilihan): disimpan sebagai hash scrypt sahaja, tak pernah dalam bentuk asal. Semasa anda menetapkannya, kami semak sama ada ia pernah bocor melalui Have I Been Pwned: hanya 5 aksara pertama hash SHA-1 dihantar, bukan kata laluan anda.
Passkey: hanya kunci awam peranti anda. Cap jari, muka dan PIN tidak pernah meninggalkan peranti anda dan tidak pernah dihantar kepada kami.
Emel, disahkan melalui pautan semasa mendaftar, kemudian untuk menghantar kod masuk dan memulihkan akaun (tidak digunakan untuk pemasaran). Akaun passkey boleh wujud tanpa emel.
Kemajuan bacaan, tetapan bacaan, rak, reaksi dan komen anda, supaya ia sama di semua peranti.
Sesi masuk (kuki yang perlu untuk kekal masuk), bersama alamat IP dan jenis pelayar untuk keselamatan dan had kadar.

Komen yang disyaki spam atau dilapor oleh pembaca disemak oleh manusia dan mungkin disorok. Anda boleh memadam akaun pada bila-bila masa di halaman Akaun: akaun, passkey, kemajuan, rak, reaksi dan komen anda dipadam serta-merta.

Jika anda membeli novel

Pembayaran diproses oleh CHIP. Kami menyimpan rekod pembelian (novel, amaun, status, kaedah bayaran, masa) dan emel resit yang anda berikan, untuk memberi akses dan untuk rekod perakaunan (disimpan sekurang-kurangnya 7 tahun seperti dikehendaki undang-undang cukai). Kami tidak menerima atau menyimpan butiran kad atau akaun bank anda. Rekod pembelian dikekalkan walaupun akaun dipadam.

Emel daripada Lipur

Pautan pengesahan dan kod masuk dihantar melalui penyedia emel kami, Emailit. Emailit merekod sama ada emel sampai, dibuka dan pautan di dalamnya diklik, supaya kami dapat memastikan kod sampai kepada anda.

Daftar awal (sebelum pelancaran)

Jika anda mendaftar sebelum Lipur dibuka, akaun anda ditanda sebagai Pembaca Awal (lencana pada komen anda). Jika anda menanda kotak "Emelkan saya sekali bila Lipur dibuka", kami simpan masa persetujuan itu dan menghantar satu emel pelancaran sahaja. Kotak itu tidak ditanda secara lalai dan boleh dibuang tanda bila-bila masa.

Notifikasi bab baharu

Jika anda menghidupkan notifikasi, pelayar anda memberi kami alamat langganan push (disediakan oleh Google, Apple atau Mozilla) dan novel yang anda pilih. Kami gunakan hanya untuk memaklumkan bab baharu. Matikan pada butang loceng atau halaman Akaun.

Data teknikal

Laman dihoskan pada pelayan kami sendiri dan dihantar melalui Cloudflare. Seperti mana-mana laman web, pelayan menerima maklumat teknikal (alamat IP, jenis pelayar, masa permintaan) untuk menghantar laman dan melindunginya daripada serangan. Kami tidak menggunakan maklumat ini untuk mengenal pasti anda. Borang daftar dan masuk menggunakan Cloudflare Turnstile untuk menapis bot; ia memeriksa isyarat pelayar tanpa kuki penjejakan.

Laman juga merekod ukuran prestasi tanpa nama (masa muat halaman, kelancaran, anjakan susun atur) bersama alamat halaman sahaja, tanpa kuki atau pengenal, untuk memastikan laman pantas di telefon.

Pelanggaran data

Jika berlaku pelanggaran data yang berisiko, kami akan memaklumkan Pesuruhjaya Perlindungan Data Peribadi dalam 72 jam dan memaklumkan anda dalam 7 hari.

Hak anda

Di bawah Akta Perlindungan Data Peribadi 2010, anda berhak meminta akses dan pembetulan data peribadi anda yang kami simpan. Nama paparan boleh ditukar dan akaun boleh dipadam terus di halaman Akaun.

Privacy Notice (English)

Draft. The data controller's registered business name and contact email will be added before launch.

You can read Lipur without an account. Accounts are optional, and we keep only the data needed to sync your reading, show comments and send the notifications you ask for. No ads, no tracking cookies, and data is never sold.

Without an account: data on your device only

Reading settings (theme, text size, font) and your last reading position are kept in your browser's local storage. This data is not sent to us. You can remove it by clearing this site's data in your browser.

If you create an account

The display name you choose (shown on your comments).
Password (optional): stored only as a scrypt hash, never in plain form. When you set it, we check whether it has appeared in a data breach via Have I Been Pwned: only the first 5 characters of its SHA-1 hash are sent, never your password.
Passkey: only your device's public key. Fingerprints, face data and PINs never leave your device.
Your email, confirmed through a link when you sign up, then used to send sign-in codes and recover your account (never used for marketing). Passkey accounts can exist without email.
Your reading progress, reading settings, shelf, reactions and comments, so they match across devices.
Sign-in sessions (a cookie needed to stay signed in), with IP address and browser type for security and rate limiting.

Comments suspected as spam or reported by readers are reviewed by a person and may be hidden. You can delete your accountat any time on the Account page: your account, passkeys, progress, shelf, reactions and comments are deleted immediately.

If you buy a novel

Payments are processed by CHIP. We keep purchase records (novel, amount, status, payment method, time) and the receipt email you provide, to grant access and for accounting records (kept for at least 7 years as required by tax law). We never receive or store your card or bank details. Purchase records are kept even if you delete your account.

Email from Lipur

Confirmation links and sign-in codes are sent through our email provider, Emailit. Emailit records whether an email was delivered, opened and whether links in it were clicked, so we can make sure your code reaches you.

Early sign-up (before launch)

If you sign up before Lipur opens, your account is marked as an Early Reader (a badge on your comments). If you tick "Email me once when Lipur opens", we store the time of that consent and send one launch email only. The box is unticked by default and you can untick it at any time.

New-chapter notifications

If you turn on notifications, your browser gives us a push subscription address (provided by Google, Apple or Mozilla) and the novels you chose. We use it only to announce new chapters. Turn it off with the bell button or on the Account page.

Technical data

The site runs on our own server and is delivered through Cloudflare. As with any website, servers receive technical information (IP address, browser type, request time) to deliver pages and protect the site from attacks. We do not use this information to identify you. The sign-up and sign-in forms use Cloudflare Turnstile to filter out bots; it checks browser signals without tracking cookies.

The site also records anonymous performance measurements (page load time, responsiveness, layout shift) with the page address only, without cookies or identifiers, to keep the site fast on phones.

Data breaches

In the event of a data breach likely to cause harm, we will notify the Personal Data Protection Commissioner within 72 hours and inform you within 7 days.

Your rights

Under Malaysia's Personal Data Protection Act 2010, you may request access to and correction of personal data we hold about you. You can change your display name and delete your account directly on the Account page.