Privacy Policy

Last updated: 6 July 2026

1. What we collect

To run your account: your name (or whatever display name you choose), email address, and a securely hashed password — we never store the password itself. To provide the service: the books in your library, your shelves, read status, star ratings, reviews, and private notes. Standard technical logs (IP address, request times) are kept briefly for security and debugging.

Custom cover photos taken in the mobile app are stored on your device only — they are never uploaded.

2. What we don't do

No advertising, no third-party analytics or tracking scripts, and your data is never sold or shared with anyone for marketing. Your email is used only for matters about your account.

3. Where your data lives

StaceLib runs on a server located in Australia. Traffic passes through Cloudflare for security and DDoS protection, and account registration uses Cloudflare Turnstile to block bots — Cloudflare processes connection data under its own privacy policy. Nightly encrypted backups are kept so your library survives hardware failure.

4. Cookies

StaceLib uses only functional cookies: one that keeps you signed in and small ones that remember interface preferences (like your sort order). There are no advertising or cross-site tracking cookies.

5. What other users can see

Nothing, unless you choose to share it. Reviews you mark as public are visible to other StaceLib users along with your display name, and books with public reviews appear in the shared Explore search. Your library, shelves, private reviews, and notes are never visible to anyone else.

6. Keeping and deleting your data

Your data is kept while your account exists. You can export your library as CSV at any time. To delete your account and its data, email [email protected] from the address on the account — deletion is permanent and normally completed within 14 days (backups age out within ~30 days after that).

7. Security

All traffic is encrypted (HTTPS), passwords are hashed with a modern algorithm, and access to the server is restricted. No system is perfectly secure, but reasonable, current safeguards are in place.

8. Changes and contact

If this policy changes materially, the date above will be updated and significant changes announced. Questions about your data: [email protected].

See also the Terms of Service.