Privacy

Reading is private here.

Bibliomancer collects as little as it can, keeps it separate, and states plainly what each piece is for.

1. What Bibliomancer stores, and why

  • Essential. If you sign in, a session cookie. It is a first-party, HttpOnly cookie required for the site to work.
  • Reading progress. Where you stopped in each book is stored in your own browser (localStorage). It never leaves your device unless you sign in and choose to sync it to your account.
  • Account (optional). Email address, an optional name, your synced reading positions and bookmarks, and — for each sign-in — the time, the browser’s user-agent string and the IP address it came from, kept with that session and gone when it expires. Passwords are hashed with Argon2id and cannot be read back. An account is opened when you sign up, when you ask for a sign-in link, or when you confirm a newsletter address (below).
  • Newsletter (optional). Your email address, where on the site you gave it, when you confirmed, and when you unsubscribed. Confirming the address opens the free account described above for it and signs you in on the device that opened the link. Every letter carries a one-click unsubscribe link.
  • Fuel (voluntary support, optional). If you choose to fuel the archive, the amount and, if you give one, a display name and message shown on the public feed. Payment details are handled entirely by Stripe; Bibliomancer never sees your card number.
  • First-party analytics (only with your consent). A random session identifier and page/reader events (which book, which chapter). No cross-site tracking, no ad targeting — this is what tells Bibliomancer which books readers want next. Nothing is recorded, and no session cookie is set, until you accept.
  • Google analytics (only with your consent). Google Analytics 4, loaded through Consent Mode. Until you accept, it runs in a cookieless, denied state or not at all. Declining changes nothing about the archive.

2. What is not done

No personal data is sold. No advertising runs in the reader. No account is required to read. No dark-pattern consent banners: “Essential only” is as easy to click as “Accept”.

3. Processors

Stripe (fuel payments only), its hosting and email providers. Each receives only what it needs. Data may be processed in the United States and the European Union.

4. Who is responsible

Bibliomancer, an independent imprint operated from Québec, Canada, decides what is collected here and why. Write to support@bibliomancer.shop with any question about your data, including a request under Québec’s Law 25 or the GDPR.

5. Your rights

You may access, correct, export or delete your account data at any time by writing to support@bibliomancer.shop. You can grant or withdraw analytics consent at any time from “Cookie preferences” in the footer of every page. Residents of Quebec and the rest of Canada, the EEA, UK, Switzerland, California and other jurisdictions with privacy laws have the rights those laws provide.

6. Retention

Fuel payment records are kept as long as tax law requires. Analytics events are aggregated after 13 months. Sessions expire after 30 days of inactivity.

Last updated September 2026. Questions: get in touch.