Privacy Policy
What we collect, why we collect it, and how long we keep it.
Last updated: August 2026
What we collect
Account data: email address, username, a hashed password. Profile data: bio, avatar and cover image. Content data: shelf items, diary entries, reviews, ratings, your watchlist and the messages you send. Technical data: session information and basic error logs.
Why we process it
To create your account and keep you signed in, to show your content to you and to others at the visibility you choose, to enable messaging, to fight abuse and spam, and to improve the service.
Where it is stored
Data is processed by our infrastructure provider (a managed PostgreSQL database and file storage hosted on Supabase). Access is constrained by row-level security rules: your private content is readable only by you.
Sharing
We do not sell or rent your data for advertising. We share it only with the providers needed to run the service (hosting, catalogue APIs) and with authorities where legally required.
Your rights
You may access, correct, export and request deletion of your data. Profile and content records can be edited or deleted in the app at any time; for full account deletion, send a request through the contact page.
Retention and children
We keep your data while your account is active and permanently delete it within 30 days of a deletion request. The platform is not intended for children under 13.
This text is an initial draft and is not legal advice.