Privacy Policy

Last Updated: June 2026 | Version 1.0

This Privacy Policy explains how our Platform collects, uses, stores, shares, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and other global privacy laws. We are committed to transparency and protecting user privacy.

1. Information We Collect

We collect the following categories of personal information to provide and secure our services:

  • Account Credentials: Name, email address, password hash, and role (Reader/Author).
  • Age Verification: Date of birth (required to access age-gated mature content).
  • Usage Data: Reading progress, purchased books, chapters read, and bookmarks.
  • Technical Identifiers: IP address, device type, operating system, browser configuration, and access logs.
  • Financial / Tax Details: (Authors only) Legal name, tax address, and country selection (W-9 or W-8BEN selection status).

2. Legal Basis for Processing

Under GDPR Article 6, we process your personal data using the following legal bases:

  • Contractual Necessity: Account creation, book purchasing, and author payouts.
  • Legitimate Interest: Safeguarding against fraud, security logging (IPs), and verifying age limits.
  • Consent: Opt-in analytical cookies and tracking of detailed reading analytics.

3. Payment Processing Security

The Platform uses Stripe for payment processing and Stripe Connect for author payout identity verification (KYC).

PCI Compliance & Stripe Data

We never store, see, or transmit credit card numbers on our servers. All financial details are securely processed directly by Stripe in compliance with Payment Card Industry Data Security Standards (PCI-DSS).

4. Third-Party Processors & Data Transfers

We share data with select subprocessors to operate the service. Data transferred to jurisdictions outside the EU/EEA is protected by Standard Contractual Clauses (SCCs) and strict data processing agreements:

  • Stripe: Payment and KYC verification (US).
  • Hosting Infrastructure: Database and assets storage.
  • Google Analytics: Dynamic website analytics (only loads if cookies accepted).

5. Data Retention Schedule

We only retain personal data for as long as necessary to complete the processing purposes or satisfy legal reporting requirements:

Data Type Retention Duration
Active Account Data Duration of active registration. Deleted 90 days after user requests account removal.
Purchase & Tax Records 7 years following the calendar year of transaction, for IRS/tax compliance.
IP & Access Logs 90 days, for security, intrusion tracking, and abuse prevention.

6. Your GDPR Data Rights

If you are located in the EU/EEA, you possess the following rights regarding your personal data:

  • Access & Portability: Obtain a copy of all data held. You can download your data file directly at Download My Data.
  • Rectification: Correct inaccurate information in your Profile dashboard.
  • Erasure ("Right to be Forgotten"): Request data deletion. Financial records are held for tax reasons, but profiles are fully anonymized.
  • Withdraw Consent: Instantly toggle cookie/tracking preferences using the cookie widget.

To submit a deletion request, go to your profile page and click "Delete Account", or email us at our support address.

7. Children's Privacy

The Platform is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child under 13 without verification of parental consent, please contact support and we will delete the data immediately.

8. Cookie Controls & Opt-Out

We use essential cookies to maintain sessions and purchase states. Non-essential cookies (such as analytics or marketing) require your explicit opt-in. You can change your consent settings at any time by clicking the floating cookie widget on the bottom-right of your screen.