Privacy policy

1. What we collect

When you create an account

Your email address (required) and, optionally, a display name. These are handled by our authentication provider, Clerk; we never store your password ourselves. Clerk also retains login metadata (timestamps, IP, device family) for security.

When you buy a book

Paddle, our Merchant of Record, handles the payment. They collect your billing details, card information, and any tax information required by your jurisdiction. We receive an order record (book id, amount, currency, paid-at timestamp) and a customer id linking the order back to your account.

When you read

We record reading progress (last page + percentage) so the reader can resume where you left off. We do not log highlights or any in-document selection.

When you review a book

Your review text, star rating, and timestamp. Your display name appears next to the review on the public book page.

When you subscribe to the newsletter

Just your email. We hand it to Resend, our newsletter provider, which stores it in an “audience” we use to send future updates. Unsubscribe links are in every newsletter message.

Operational telemetry

Like every web service, we record server-side request logs (URL, status code, latency) and aggregate analytics (page views, country-level geography) through Vercel Analytics. These help us spot bugs and keep the site fast.

2. Where the data lives

Each piece of data is held by exactly one provider. We don't copy data into spreadsheets, CRMs, or marketing tools.

• Clerk — your account (email, sign-in metadata).
• Paddle — your billing details and invoices.
• Neon (PostgreSQL) — your order history, library entitlements, reading progress, and reviews.
• Cloudflare R2 — the per-order watermarked PDF artifacts you download. The watermark encodes your purchase id; no personally identifying name or email is written into the file.
• Inngest — short-lived async job records (e.g. the watermarking pipeline). Records are deleted after the job completes; no long-term retention.
• Resend — your newsletter subscription (if you opted in) and outbound transactional email logs (e.g. order confirmations).
• Upstash Redis — short-lived rate-limit counters keyed by IP. No identifying information beyond the IP for a rolling 10-second window.
• Vercel Analytics — aggregated, anonymized page-view counts. No cookies; no cross-site tracking.

3. What we don't do

• We don't sell your data. Ever.
• We don't share your account email with publishers, authors, or any third party that isn't the providers listed above.
• We don't use advertising trackers or behavioral targeting.
• We don't store credit card numbers on our servers.

4. Retention

Library entitlements and reading progress stay as long as your account exists. Order records are kept for the duration required by accounting law (typically ten years for tax purposes in Turkey). Rate-limit counters expire after ten seconds. Inngest job records expire within a few hours.

5. Your rights

You can, at any time:

• Export your data — visit /account/settingsand click “Export data.” You'll receive a JSON file with your profile, orders, library, reading progress, and reviews.
• Delete your account — visit /account/settingsand click “Delete account.” This removes everything we can remove. Paddle's tax records and Resend's unsubscribe history are retained as required by law and by those providers' own retention rules.
• Object or correct — email us at emre30283@gmail.com and we'll respond within fourteen days.

If you're in the European Union, you have the rights granted by GDPR (Articles 15–22). If you're in Turkey, you have the rights granted by KVKK Article 11 — see our KVKK page in Turkish for the full list and how to file a complaint with the regulator (KVKK Kurumu).

6. Cookies

We use a small number of strictly necessary cookies: an auth session cookie from Clerk and a shopping-cart cookie that holds your in-progress purchase. We don't use any cookies for advertising or analytics.

7. Changes to this policy

We'll update this page when material changes happen and bump the “last updated” date at the top. For changes that affect retention or data sharing, we'll also email you before they take effect.

Questions about your data? Email emre30283@gmail.com. We answer every message.