Privacy

Controller

For access, correction or deletion, a message is enough: post@wirbuchverliebten.com

What happens when you visit

Loading a page produces technically necessary access data at our infrastructure provider, Cloudflare: a shortened IP address, a timestamp and the address requested. They serve operation and attack prevention.

Cloudflare Web Analytics measures reach. It sets no cookies, reads no browser storage and builds no profile across pages. We verified that in the delivered file itself rather than trusting the description.

Why there is no cookie banner

A consent banner is required where cookies are set for advertising or analytics. Neither happens here. The only cookie is the sign-in cookie, and it is necessary for operation: without it the site cannot know who is signed in. Such cookies do not require consent.

Signing in without a password

Signing in works through a link sent to your email address. We therefore store your email address and the time of your last sign-in. There is no password, so no password can be lost.

Sign-in data is held by Supabase in Frankfurt, email is sent through Cloudflare. Both process the data on our behalf.

Your reading position

This is the piece of data the whole thing turns on. For notes to reach you only once you are at the same place, the application has to know how far along you are. We therefore store, per book club, the chapter you last reached.

Three things hold here:

• Your reading position is shown to nobody, not even to the others in your book club. It only governs which notes you see.
• It is never displayed as a number or a bar. Reading is not a performance.
• The application does not enforce this by agreement but through the database itself: the rule sits where the data sits, not in a request made of the program code.

Books are never uploaded. We store only the structure of a book, meaning chapter names and their relative positions.

If you sign up for a city

On the city pages you can sign up to hear when a book club starts there. We store your email address, the city, your language and the wording of the consent you read at the time.

Nobody can view that list, not even you: there is no query that would reveal whether a given address is on it. Otherwise the form would be a tool for finding out who is interested in which city.

To be removed, a message is enough: post@wirbuchverliebten.com

What you write

Notes and messages inside a book club are visible to the other members once they have reached the same place. They are not public and do not appear in search engines.

How long, and what you can ask for

Data stays while the account exists. If it is deleted, the email address, reading positions and your own notes are removed.

Under the GDPR you have, among others, the right to:

• access, meaning information about what is stored
• rectification of incorrect data
• erasure
• data portability, meaning a copy in a readable format
• lodge a complaint with the Austrian Data Protection Authority

An informal message is enough: post@wirbuchverliebten.com