Privacy

Reading is private here.

We collect as little as we can, keep it separate, and tell you plainly what each piece is for.

1. What we store, and why

  • Essential. A cart identifier and, if you sign in, a session cookie. Both are first-party, HttpOnly cookies required for the site to work.
  • Reading progress. Where you stopped in each book is stored in your own browser (localStorage). It never leaves your device unless you sign in and choose to sync it to your account.
  • Account (optional). Email address, an optional name, your synced reading positions and bookmarks, and your orders. Passwords are hashed with Argon2id; we cannot read them.
  • Orders. Name, shipping address, email and phone number (carriers require it), passed to our payment processor (Stripe) and our print partner (Lulu) solely to fulfil your order.
  • First-party analytics (only with your consent). A random session identifier and page/reader events (which book, which chapter, add-to-cart, purchase). No cross-site tracking, no ad targeting — this is what tells us which books to publish next. Nothing is recorded, and no session cookie is set, until you accept.
  • Google analytics and advertising measurement (only with your consent). Google Analytics 4 and Google Ads conversion measurement, loaded through Consent Mode. Until you accept, these tags run in a cookieless, denied state or not at all. Declining changes nothing about the archive.

2. What we do not do

We do not sell personal data. We do not show advertising in the reader. We do not require an account to read. We do not use dark-pattern consent banners: “Essential only” is as easy to click as “Accept”.

3. Processors

Stripe (payments), Lulu Press, Inc. (printing and shipping), our hosting and email providers. Each receives only what it needs. Data may be processed in the United States and the European Union.

4. Your rights

You may access, correct, export or delete your account data at any time by writing to hello@bibliomancer.shop. You can grant or withdraw analytics/advertising consent at any time from “Cookie preferences” in the footer of every page. Residents of Quebec and the rest of Canada, the EEA, UK, Switzerland, California and other jurisdictions with privacy laws have the rights those laws provide.

5. Retention

Order records are kept as long as tax and consumer law require. Analytics events are aggregated after 13 months. Sessions expire after 30 days of inactivity.

Last updated August 2026. Questions: contact us.