Privacy

• Your account — email address, and whatever name, username and picture you set. If you joined the waitlist, the address you gave.
• What you write— clubs you create, discussions and replies, and the books you put on a club’s shelf.
• Your library — the books you add, their shelf, your rating, finish date and notes. If you imported from Goodreads, whatever was in the file you uploaded.
• Invitations you send — the address you invited and the club it was for, until the invitation is used or withdrawn.
• Notifications — a record that something happened in a club you are in. These are deleted after 30 days.

We do not ask for a date of birth, a phone number, a location or a payment method, and there is nothing in the product that collects them.

These are the only third parties involved in running the service:

• Clerk — accounts, sign-in and the waitlist. Your password never reaches us.
• Supabase — the PostgreSQL database holding everything in the list above.
• Vercel — hosting, plus its own analytics and performance measurement of page requests.
• Resend— sends the emails: invitations, and a note when a book on your club’s shelf is about to start (which you can turn off in your profile). It sees the address being mailed.
• Google Analytics — measures how the site is used. It sets cookies.
• ISBNDB — book search. It receives the words you type into a book search, and nothing identifying you.

We do not sell, rent or trade your information, and we do not run advertising — so nothing here is shared with an ad network, because there isn’t one.

Your username, display name and picture are visible to people whose clubs you share, along with what you post and when you joined. Your email address is not visible to anyone else using the site— the database does not permit a signed-in account to read another account’s address at all.

Your library is private by default. You can choose to open it to other signed-in members, which is what puts it on your public profile page; until you do, nobody else can see it. Importing from Goodreads does not change that setting.

A club’s reading list, discussions and member list are visible only to its members, whether the club is public or private.

Two kinds, and no others. Clerk sets a cookie to keep you signed in — without it the site cannot work. Google Analytics and Vercel’s analytics set cookies to measure usage. None of it is used for advertising or sold to anyone.

Delete your account and we delete your profile, your library, your discussions and replies, and your notifications. Any club you created goes with it, for everyone in it — along with that club’s reading list and threads. There is no way to hand a club to someone else yet, so tell us before you delete the account if the group wants to keep it.

One thing survives on purpose: books you added to the shared catalogue stay in it, with your name removed. Deleting those would empty the shelves of clubs you had nothing to do with.

Ask for a copy of your data, a correction, or deletion at privacy@bookmarksociety.com. Backups are kept by our database provider for a short period and expire on their own schedule.

This is not built for children and accounts are not knowingly created for anyone under 13. Tell us if one has been and we will remove it.

If this changes in a way that affects what we do with your information, we will say so here and move the date at the bottom of the page. Questions go to privacy@bookmarksociety.com.