Privacy policy

Data controller

FUJI AGENCY, a simplified joint-stock company (SAS), is responsible for personal-data processing carried out through Inkshelf.

Contact

[email protected]

Data we process

• Account: name, email address and a password hash; login sessions are stored to keep your account authenticated.
• Library and activity: books, ISBNs, authors, covers, statuses, progress, notes, quotes, collections, series, loans, ratings, goals, reading logs and reading sessions.
• Optional features: language preference, push subscription when enabled and public-sharing settings.
• Security: your IP address may be used temporarily by abuse-prevention and rate-limiting mechanisms. Session cookies are required for the account to work.

Purposes and legal bases

• Provide the account, library, import, reading tracking, export and requested features: performance of the requested service.
• Protect accounts, limit abuse and send service-critical messages: legitimate interest and measures necessary to provide the service.
• Display a public library page or send notifications: your voluntary activation of the relevant feature, which you can turn off.

Public sharing

Sharing is off by default. When you enable it, the public page shows your name and books marked as read, with the information needed to present them, such as title, authors, cover and rating.

Private notes, quotes, detailed progress, sessions and reading logs are not shown on that public page. You can turn sharing off in settings.

Providers and external services

• Book searches and covers may be sent to the metadata providers used by the application, including Open Library, BnF and, if you configure it, Google Books.
• Password-reset emails are sent through Resend. Only information needed for delivery, such as the email address, name and temporary link, is sent to that provider.
• Hosting infrastructure and the database are operated on the publisher’s behalf by the hosting providers configured for the service.

Retention and deletion

Account and library data are kept while your account is in use. You can request account deletion from settings; this deletes the account and data attached to it, subject to legal obligations and technical backup copies during their normal lifecycle.

Password-reset tokens expire after one hour and are invalidated after use.

Cookies and local storage

Inkshelf uses a strictly necessary session cookie and a language cookie to remember your preference. The theme and some interface settings may be stored in your browser’s local storage. The application does not use advertising cookies.

Security and automated decisions

The publisher implements proportionate technical and organisational measures to protect accounts and data, including hashed password storage, time-limited sessions and protections against abusive attempts.

Inkshelf does not make automated decisions that produce legal effects or similarly significant effects on users.

Your rights

You may contact FUJI AGENCY to exercise applicable rights, including access, correction, erasure, restriction, objection and portability where applicable.

Email

[email protected]

Complaint

You may also contact the French data-protection authority, CNIL.