Privacy

What this shop holds about you, why we hold it, who else sees it, and what you can ask us to do with it.

What we hold

Your account

Your email address. Required — it identifies the account, and it is where receipts, download links and codes are sent.
Your name. It is taken from your email address when you sign up; you can change it in Settings.
Your password, stored as a hash. We cannot read it. There is no sign-in through another service.
When you last visited, and the country your connection came from, where the network in front of the site tells us.
Your account balance and every entry behind it: refunds credited, funds you added, orders paid from it, withdrawals.
If you saved one, the USDC address your withdrawals are paid to, and when you saved it.

Your orders and payments

Each order: its code, the books on it, what it cost, when it was placed, and whether it was paid, expired or refunded — with a copy of each book's title, author, ISBN and price as they stood that day, so an old receipt stays correct after the catalogue changes.
For an order paid over Lightning: the invoice raised for it — the amount, the invoice itself, and when it expired or settled. We learn that it was paid and for how much; nothing about the wallet or the payer reaches us.
For funds you add in USDC: the deposit address assigned to you (yours alone, for good), each transfer that arrived at it — the sending address, the amount and the transaction id, which are public on the Solana blockchain — and the move of those funds to the shop's own wallet.
For a withdrawal: the amount, the fee, the destination you gave us, and the payment or transaction that settled it.
If you report a problem from a payment page: what you chose and what you wrote.

Your downloads

Each download link we sent you, how many times each book has been downloaded, and when. The count is a record, never a limit.

What you write and do here

The lists you make and the books on them. Lists are private to your account.
The reviews you write, with any photos. Once approved, a review is public under your first name and last initial.
Your conversations with support.
Your book requests. The book's details and any cover photo you send are listed publicly under Requested books; the email address or Telegram chat you asked us to answer on is not.
The books you opened while signed in — the last 50, for the Recently viewed strip. You can delete this history in Settings at any time.
A copy of every email we sent you — receipts, download links, codes, replies — and whether it was delivered.
Notes our staff add to an order or to your account while helping you.

Your sessions

While you are signed in, a session record with the IP address and browser it was created from. A session lasts up to six months while you keep using the site; signing out ends it.

What we never hold

No card number, no bank details, no payment credentials of any kind. You pay from your own wallet or app; we never see its login. The codes we email you are never stored — only a hash that lets us check what you type.

We do not sell personal data, and we do not share it for advertising. We send no marketing email: every email from us is about something you did — an order, a code, a request, a reply.

Why we hold it

To take your order, deliver it, and keep your books downloadable afterwards. Without an email address and an order record, we can do none of that.
To keep your balance right, and to pay a withdrawal only to a destination you verified.
To answer you when you write to support or ask for a book.
To keep the shop's own books straight, and to limit abuse of the site.

Who else sees it

The payment networks that settle a payment. On Lightning, payment is made wallet to wallet; the shop learns that an invoice was paid, not who paid it. On Solana, a USDC transfer is a public record on that blockchain: the sending address, the receiving address, the amount and the time are visible to anyone, as they are for every transaction on it.
Our email provider, which delivers our mail to you and so handles your address and the message.
Our hosting, storage and network providers, which run the site, hold the book files, and check that a sign-in is not a robot.
Telegram, if you chose it to hear about a book request. Our own staff are also alerted to new orders, deposits, support messages and book requests over Telegram; those alerts carry the facts of the event, which can include your email address.
Google Analytics, only while it is switched on. It counts visits and sets cookies under Google's own terms; it is not tied to your account with us.

Each of these handles what it receives under its own terms. We give them only what the job needs.

Cookies, and what your browser keeps

Signing in sets a cookie, so the next page knows it is you. Choosing a payment method sets a cookie for one day, so the payment page opens on the right guide. Apart from Google Analytics while it is switched on, there is no advertising cookie and no third-party tracker.

Your browser's own storage holds a few things that are never sent to us: your light or dark theme, your recent searches, the books you viewed and the lists you made while signed out, and the order you were about to place when you were asked to sign in. Signing in moves your lists and viewed books into your account and clears the local copies; clearing your browser data clears the rest.

How long we keep it

Your account and its order history last as long as the account does. Your books have no expiry date, and the order record is what proves you own them. The records behind your balance — credits, debits, deposits, withdrawals — stay with the account as part of the shop's own books.

Your viewing history keeps only the last 50 books and is yours to delete at any time. A session ends when you sign out, or after six months unused. Sign-in links and emailed codes expire within the hour and are useless after that.

What you can ask for

A copy of what we hold about you. Write to us from your account, or at the support address in the footer.
A correction. You can change your name in Settings. For your email address, write to us: it is the identity every order is filed under, so we change it by hand.
Deletion of your viewing history. Settings → Delete viewing history, at once.
Deletion of your account. Write to us. It ends access to the books bought with it and to any balance left on it — withdraw the balance first — so we will tell you exactly what you are about to lose before we do it.
A question or a complaint about how we handle your data. Write to us; we answer every one.

Changes

We can change this page. The version here is the current one.

Questions go to our support address, in the footer of every page.