Privacy Policy

    Last Updated: October 9, 2026

    We process personal data only where it is necessary to provide Librisync, respond to requests, operate accounts and libraries, send product messages you have not opted out of, and improve public pages with anonymous cookieless reach measurement. Language and accessibility choices such as i18nextLng and font_scale are stored locally as UI preferences. No advertising, retargeting, social pixels, session recording, or profiling are used.

    Your Privacy Rights Under GDPR

    As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

    • Right to Access: You can request a copy of all personal data we hold about you
    • Right to Rectification: You can request corrections to inaccurate personal data
    • Right to Erasure: You can request deletion of your personal data
    • Right to Data Portability: You can request your data in a machine-readable format
    • Right to Object: You can object to processing of your personal data
    • Right to Restrict Processing: You can request limitation of data processing
    • Right to Withdraw Consent: You can withdraw consent at any time

    Exercise Your Rights

    You can exercise your data rights directly in your account settings or by contacting us at privacy@librisync.com

    What Data We Collect

    Account Information

    • Email address (required for account creation)
    • Name (optional)
    • Profile picture (optional)
    • Account preferences and settings, including language, privacy and cookie choices, email preferences, feedback messages, and founder-call requests you submit

    Library Data

    • Book titles, authors, and ISBN numbers you add
    • Book covers and metadata
    • Reading progress and notes
    • Custom tags and categories

    Technical Data

    • IP address and request metadata, processed for security, rate limiting, abuse prevention, and server logs; where possible, IP addresses are hashed, shortened, or deleted when no longer needed
    • Browser type and version
    • Device information, app and browser events, API usage metadata, and diagnostic logs needed to operate and secure the service

    Consent Records

    We maintain records of your cookie, analytics, affiliate tracking, and email communication preferences, including opt-ins, opt-outs, unsubscribe events, suppression status, timestamps, and source information where required to prove or respect your choices.

    Legal Basis for Processing

    Contractual Necessity

    Processing your account and library data to provide our book management services.

    Legitimate Interest

    Security monitoring, abuse and fraud prevention, service reliability, product improvement using aggregated or necessary operational data, admin audit logs, and handling requests you send us, balanced against your privacy rights.

    Consent

    LibriSync uses a two-stage analytics model: Without consent, purely identifier-free baseline reach measurement is performed (server-side via Netlify Web Analytics and via an identifier-free Simple Analytics 1-pixel beacon on allowed paths without cookies or browser storage; Legal basis: Art. 6(1)(f) GDPR in conjunction with § 25(2) TDDDG). Following your explicit consent in the cookie banner or settings, we activate the extended Simple Analytics mode with manual pageviews, scroll depth and duration metrics, and typed product usage events (Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). Your consent (version 2.0) is stored for a maximum of 12 months and can be revoked at any time with future effect in the cookie preferences. No private book data, search terms, identifiers, passwords, or session recordings are collected.

    Website Optimization (A/B Testing)

    For public landing pages we may deliver different content variants. The default flow is visitorless and counts page views, CTA clicks, signup starts, and signup completions only by experiment, variant, normalized path, and day. It creates no visitor ID or browser storage. Persistent return attribution only occurs with explicit Analytics consent.

    The following data is collected:

    • Pseudonymous visitor ID or campaign identifier (randomly generated, not directly identifying you)
    • Assigned page version (e.g., Version A or B)
    • Identifier-free daily counts for page views, CTA clicks, signup starts, and signup completions; additional individual events only after Analytics consent
    • If you register or sign in after giving analytics consent, the visitor ID or campaign parameters may be linked to your user account to measure conversion and product email effectiveness

    Storage: visitorless A/B counts contain no visitor or user identifier and create no cookie, localStorage, or sessionStorage entry. Persistent assignments and user links are stored only after Analytics consent. Essential UI preferences such as language and font size remain separate.

    Legal basis: identifier-free aggregate measurement serves the legitimate interest in operating and improving Librisync with minimal privacy impact. Persistent attribution requires consent; necessary account and security processing remains based on contract performance or legitimate interest.

    Retention period: Identifier-free aggregate A/B and product usage counters are retained for no more than 13 months. Consent-based individual attribution is deleted or aggregated when no longer required and normally no later than 12 months after the experiment ends.

    First-touch signup attribution

    When you first visit, LibriSync temporarily keeps a data-minimized first touch in volatile memory (or session storage upon consent): the referrer origin without its path or query, fixed allowlisted campaign categories, the normalized landing path, language, a coarse device class, and the time. When initiating third-party registration (e.g., Google or Apple), a temporary carrier is briefly staged in session storage for up to 30 minutes to preserve registration context across the external redirect (§ 25(2) No. 2 TDDDG). During signup, this minimized payload is carried in protected account metadata until confirmation and then removed. One immutable record is linked to your account to understand signup sources. Unknown campaign values and test accounts are discarded. The record is included in data export and account deletion and is automatically removed after no more than 13 months.

    Identifier-free product usage analytics

    Successful book additions, wishlist additions, loans, shares, reading completions, and scan actions are counted per event and day in Supabase without identifiers. To measure the onboarding funnel through the first ten books, confirmed users who begin with an empty library also have their account ID, five fixed milestone numbers, and milestone timestamps stored for no more than 13 months. A private enrolled-or-disqualified cohort marker and the compact numbers of milestones already completed are retained for the lifetime of the account so returning accounts are not counted again. This account-linked processing helps us improve onboarding and is based on our legitimate interest in operating and improving LibriSync with limited data. Milestones and the cohort marker are included in account export and deletion. Separate scan and onboarding abuse protection temporarily uses a pseudonymous account token for a brief duration and cannot be joined to usage counters.

    Cookie Policy

    Essential Cookies

    These cookies are necessary for the website to function and cannot be disabled. They include:

    • Authentication and session management
    • Security and fraud prevention
    • Basic functionality and user preferences

    Do Not Track

    We respect your browser's Do Not Track (DNT) signal: In baseline mode, the Simple Analytics beacon is not sent when DNT is active. Identifier-free product counters run server-side and do not inspect DNT. When you explicitly grant analytics consent in the cookie banner or settings, extended mode is activated and the DNT signal is overridden for this intended measurement. Upon revoking consent, DNT is immediately and fully respected again.

    Data Sharing and Transfers

    We do not sell your personal data. LibriSync does not permanently store the scan images itself; they are transmitted to AI service providers for analysis. We only share data with service providers or third parties in these limited circumstances:

    Service Providers

    • Supabase (Database): Core infrastructure for authentication, database, and storage located in the European Union; serverless Edge Functions are globally routed
    • Simple Analytics: Two-stage reach and product measurement by Simple Analytics (Simple Analytics B.V., The Netherlands, EU): 1. Baseline mode (without consent): Identifier-free reach measurement via a 1-pixel image request on known public and normalized application routes. No cookies, no browser storage, no device or user IDs, no fingerprinting, no ad tracking. Browser Do Not Track (DNT) is strictly respected and completely suppresses the request. Legal basis: Art. 6(1)(f) GDPR in conjunction with § 25(2) TDDDG. 2. Extended mode (only after explicit consent): Loading of the official script (scripts.simpleanalyticscdn.com) to measure manual SPA pageviews, scroll depth, time on page, screen resolution, normalized referrers/allowed campaign tags, and selected typed product and usage events (e.g., book added, scan started, search submitted). Metadata is strictly limited to coarse categories/buckets; sensitive data (titles, ISBNs, search queries, IDs, emails, tokens) is never transmitted. An active DNT signal is overridden for this extended mode by the deliberate opt-in in the banner. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Consent is stored for up to 12 months and can be revoked at any time in the cookie preferences.
    • Netlify Web Analytics: Cookieless reach measurement performed server-side from Netlify CDN request logs to operate and improve the website and evaluate aggregate pageviews, unique visitors, top pages, sources, and coarse locations. Depending on the request, Netlify processes the requested path, timestamp and technical request metadata, referrer/source, coarse location, and IP address used to compute unique visitor metrics. LibriSync loads no Netlify analytics JavaScript, sets no Netlify analytics cookie, creates no visitor or device ID, and stores no additional raw analytics copy. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating the website securely and cost-effectively and carrying out low-impact aggregate reach measurement. Netlify processes customer data for the term of the service agreement and deletes it after termination in accordance with its DPA and service deletion rules; availability in the dashboard depends on the periods configured and provided by Netlify. Netlify, Inc. and its sub-processors may process data in the United States or other non-EEA countries. Transfers are safeguarded by the EU-US Data Privacy Framework where applicable and European Commission Standard Contractual Clauses otherwise. Netlify Privacy Statement · Netlify Data Processing Agreement (DPA).
    • Google Books API: Book metadata lookup — your IP address is transmitted to Google when API calls are made
    • OpenAI: AI-based text and image processing for book detection and suggestion generation — required feature data such as book metadata or images are processed without unnecessary account identifiers
    • Google Gemini: AI-powered image and text recognition for analyzing bookshelf photos as well as automated book synopsis generation — photos or book titles and authors are transmitted to recognize books or generate summaries. Please avoid uploading photos with people or confidential documents.
    • Open Library (openlibrary.org): Book metadata lookup, cover images, and author photos — your search queries (titles, ISBNs, author names) are transmitted to Open Library's public API
    • Internet Archive (archive.org): Book cover image search — book titles and author names are transmitted to the Internet Archive's public API to locate cover images
    • WorldCat (OCLC, worldcat.org): ISBN and book metadata lookup — ISBN numbers and search queries are transmitted to the WorldCat SRU API operated by OCLC (US-based)
    • Resend (Email): Transactional and product email delivery, including account confirmations, password resets, onboarding & lifecycle notifications, founder messages, and support responses via EU-hosted servers. Email open-tracking pixels are not used without consent; delivery status events and link clicks may be processed to ensure delivery and measure engagement.
    • Amazon (Affiliate Program): Book links may redirect you to Amazon. When you click these affiliate links, we may record a pseudonymous click event, timestamp, referrer or campaign parameters, and book or link target to measure referrals and prevent abuse. Amazon may set its own cookies and track purchases through the Amazon Associates Program. We may receive a commission on qualifying purchases at no additional cost to you. Legal basis: consent for analytics where required and legitimate interest for referral accounting and abuse prevention. See Amazon's Privacy Notice.

    Legal Requirements

    We may disclose personal data if required by law, court order, or to protect our rights and safety.

    International Data Transfers

    Our core infrastructure (Supabase, Resend) processes and stores data within the European Union where configured. Some third-party service providers are based in the United States or may process data outside the European Economic Area (EEA). When your data is transferred outside the EEA, we ensure appropriate safeguards are in place:

    • EU-US Data Privacy Framework: Where applicable, our US-based providers are certified under the EU-US Data Privacy Framework (e.g., Google)
    • Standard Contractual Clauses (SCCs): We rely on EU-approved Standard Contractual Clauses for transfers to providers not covered by adequacy decisions

    Service providers with US-based processing: Netlify, Google (Books API, Gemini AI), OpenAI, Open Library, Internet Archive, WorldCat (OCLC), and Amazon.

    Additional Information for US Residents (US State Privacy Rights)

    This section applies to users residing in the United States (including California, Colorado, Connecticut, Virginia, Utah, and other states with applicable privacy statutes) and supplements this Privacy Policy pursuant to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) and similar state privacy laws.

    Notice at Collection: Categories of Personal Information Collected

    • Identifiers: such as email address, account identifier, and IP address.
    • Customer records: such as voluntarily provided name or profile picture.
    • Commercial and library records: such as cataloged books, reading status, shelves, notes, and service interactions.
    • Visual and sensory information: user-uploaded photos of book spines and covers for AI-assisted cataloging and recognition.
    • Internet and network activity: such as browser type, operating system, and anonymized access telemetry required to operate the platform.
    • Geolocation data: such as coarse, non-precise location (country or region) derived from network requests to route traffic and provide aggregated web analytics.
    • Sensitive personal information (account credentials): such as account login in combination with your password and security credentials, collected solely to authenticate and secure your account access via Supabase Auth. Retained only for the duration of your active account lifecycle and deleted upon successful account deletion (or upon support escalation if auth service deletion requires manual remediation). We do not use or disclose sensitive personal information for any purpose other than providing the service, and we do not use it to infer characteristics.

    Business and Commercial Purposes for Processing

    We collect and process these categories for the following business and commercial purposes: providing, maintaining, and improving our book management service; delivering customer support and service notifications; dispatching transactional, onboarding, and lifecycle emails; conducting consent-based web analytics and A/B testing attribution; measuring affiliate referral links; protecting platform security; detecting and preventing fraud or abuse; and complying with legal obligations.

    Criteria for Retention Periods (Notice at Collection)

    We retain each category of personal information in accordance with defined criteria based on the purpose and legal requirements: Identifiers, customer records, and library data are retained for the duration of your active account lifecycle and deleted upon account deletion, except where retention is required to handle open support requests, honor communication opt-outs, prevent fraud, or satisfy statutory tax and commercial retention obligations (up to 7 years for compliance, consent, and financial audit logs). On our platform, temporary visual scanner uploads are purged within 24 hours after processing; upstream AI API service providers (Google Gemini and OpenAI) retain transmitted scan data solely for abuse-monitoring and security purposes in accordance with their developer API retention terms (up to 30 days for OpenAI and up to 55 days for Google) before deletion. Internet activity, coarse geolocation, and CDN access logs are retained for the duration of our service and hosting provider agreements or deleted after technical operational necessity (typically within 30 days to 12 months for aggregated telemetry).

    No Sale or Sharing of Personal Information

    We do not sell personal information and we do not share personal information for cross-context behavioral advertising (as defined under CCPA/CPRA and applicable US state privacy laws). Consequently, we do not provide a 'Do Not Sell or Share My Personal Information' opt-out link.

    Disclosures of Personal Information for a Business Purpose in the Preceding 12 Months

    In the preceding 12 months, we have collected the categories of personal information listed above (Identifiers, Customer records, Commercial records, Visual/sensory info, Internet/network activity, Coarse geolocation, and Account credentials).

    • Categories of Sources: We collect personal information directly from you (when you register, configure your profile, catalog books, or upload photos), automatically from your device and browser interactions (such as technical telemetry and access logs), and from third-party book catalog APIs (when enriching book metadata).
    • Disclosures for a Business Purpose: In the preceding 12 months, we have disclosed the following categories of personal information to service providers and contractors for operational business purposes: Identifiers and customer records to cloud database/auth infrastructure (Supabase) and transactional email providers (Resend); Visual and sensory information (book spine photos) to AI inference providers (Google Gemini, OpenAI) solely to perform text recognition and cataloging; Commercial records to cloud hosting and database providers (Supabase, Netlify); and Internet telemetry to hosting/CDN providers (Netlify).
    • No Sale or Sharing in the Past 12 Months: In the preceding 12 months, we have not sold or shared (for cross-context behavioral advertising) any personal information of consumers, including minors under 16 years of age.

    Your US State Privacy Rights

    • Right to Know and Access: You have the right to request information about the categories of personal information collected and to receive a copy of your data.
    • Right to Delete: You have the right to request deletion of your personal information.
    • Right to Correct: You have the right to request correction of inaccurate personal information.
    • Right to Non-Discrimination: We will not discriminate against you in any way for exercising any of your statutory privacy rights.

    You may exercise these rights at any time directly through the self-service tools in your account settings (Data Export and Account Deletion) or by contacting us at privacy@librisync.com.

    Verification of Requests

    To protect your privacy and security, we must verify your identity before fulfilling any request to know, access, correct, or delete. If you make a request through your authenticated account settings, your active session serves as verification. For requests submitted via email, we verify your identity by requiring you to send the request from the email address registered with your account, and we may ask you to confirm recent account activity (such as recently cataloged titles or account creation date). If we cannot reasonably verify your identity, we will inform you and explain why.

    Authorized Agents

    You may designate an authorized agent to submit requests on your behalf. To protect your information, an authorized agent must provide written, signed authorization or a valid power of attorney from you. We may also require you to verify your own identity directly with us and confirm that you provided the agent permission to submit the request. Agents may submit requests by emailing support@librisync.com with the subject 'Authorized Agent Request' and attaching the necessary proof.

    Right to Appeal (Appeals Process)

    If we decline to take action regarding your privacy rights request, you may appeal our decision within 60 days by emailing support@librisync.com with the subject 'Privacy Rights Appeal'. We will review and respond to your appeal in writing within 45 days (or 60 days where permitted by law). If your appeal is denied, you may contact the competent consumer protection authority (such as your state Attorney General).

    Data Security

    • All data encrypted in transit (TLS 1.3) and at rest (AES-256)
    • Regular security audits and vulnerability assessments
    • Access controls and authentication for all systems
    • Notification of the competent supervisory authority without undue delay and, where feasible, within 72 hours unless a breach is unlikely to result in a risk to individuals' rights and freedoms; affected individuals are informed without undue delay when it is likely to pose a high risk
    • Privacy by design principles in all development

    Data Retention

    • Account Data: Retained while your account is active and as long as needed to handle open support, feedback, founder-call, or legal requests
    • Library Data: Retained until account deletion
    • Consent Logs: Consent, unsubscribe, suppression, and email delivery logs are retained for up to 7 years where needed to prove compliance and respect opt-outs
    • Deleted Accounts: Account and library data are permanently deleted within 30 days unless a longer retention period is legally required or records needed to honour opt-outs or address security needs must be retained

    Automated Decision-Making

    Librisync does not make any legally binding or similarly significant automated individual decisions about you (Article 22 GDPR). AI-powered features, recommendations, email segmentation, and A/B tests serve only as supportive, personalization, or measurement tools and do not produce legal effects for you.

    Children's Privacy

    Our service is intended for persons aged 16 and older. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will delete that data promptly. If you believe your child has provided us with personal data, please contact us at privacy@librisync.com.

    Right to Lodge a Complaint (Art. 77 GDPR)

    If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for our company is:

    Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

    Promenade 18

    91522 Ansbach, Germany

    Phone: +49 (0) 981 180093-0

    Email: poststelle@lda.bayern.de

    Website: www.lda.bayern.de

    Obligation to Provide Data

    To create an account and use Librisync, you must provide a valid email address. Without this information, we cannot provide our service (contractual necessity under Art. 6(1)(b) GDPR). All other personal data (name, profile picture) is voluntary.

    Contact Information

    Data Controller:

    Sebastian Taatz Consulting UG (haftungsbeschränkt)

    Sebastian Taatz

    Raiffeisenstr. 2

    97209 Veitshöchheim, Germany

    Email: privacy@librisync.com

    Phone: +4915567113162

    For any privacy-related questions or to exercise your rights, please contact us using the information above. We will respond without undue delay and generally within one month. If a legally permitted extension is required, we will inform you within the first month.

    Changes to This Policy

    We may update this privacy policy from time to time. We will notify you of material changes by email or through our service. Where legally required, we will ask for renewed consent before the changed processing starts.