Privacy notice

Bookitis policy

What Bookitis handles

Registration uses an email address and password. Signed-in activity includes private follows, suggestions, correction reports, creator claims, assertions, preferences, and security/session records needed to operate the account.

Public source records are indexed separately from private reader activity. Bookitis does not publish reader profiles, public shelves, or a follow graph.

Bookitis policy

Cookies and telemetry

Bookitis uses a bookitis_session cookie for sign-in, a bookitis_csrf cookie for request protection, and a bookitis_vid visitor cookie for limited product telemetry. The visitor identifier is HMAC-hashed before it is logged, is retained for up to 365 days in the browser, and is not a public profile.

Allowed client events are page views, web errors, evidence opens, and source clicks. Logs use paths and limited error/source metadata; relation telemetry does not send source URLs or destination URLs.

Bookitis policy

Retention, export, and deletion

Use Account to request a private JSON export or delete the account. Export downloads expire after 24 hours; exports omit passwords, tokens, provider credentials, raw provider payloads, and private editor notes. A recent password re-authentication is required.

Deletion revokes sessions and removes the account email, password, profile, follows, claims, export files, and avatar. Editorial suggestions and correction records may remain with the submitter anonymized so the public record and operational history are not rewritten.

Private feed output is limited to the implemented 30-day activity window. No longer retention promise is made here without a corresponding product control.

Bookitis policy

Email and third parties

Bookitis may send transactional verification, password-reset, and security email. A separate product marketing preference control is not currently exposed, so we do not promise an unimplemented marketing unsubscribe flow.

Book and creator data may come from YouTube and bibliographic providers such as Open Library or Google Books. Their handling and attribution are described in Sources & rights.