Privacy

Your account. An email address, a display name and, if you paste one, a link to an avatar picture. The email address is how you sign in and the only way to reach you; there is no newsletter and no marketing. Your password is never seen by this app — Supabase holds it, hashed, and answers yes or no when you sign in.

What you write in a club. The books, meetings, scores from 0 to 10, comments, tier lists, draw picks and reading progress you add. This is the club's record of its own reading, and it is what the site is for.

Your own shelf. Books you read outside your clubs, with their status, your score, your review and how far in you are — plus how you arranged your bookcase.

A short activity trail. So the bell can say what the others have been doing. It is kept for 60 days and then deleted.

Counters that stop abuse. When you sign in, sign up or write something, a counter goes up for a few minutes so that nobody can hammer the site. It holds what was being done and either your account id or your network address hashed with a secret — never the address itself — and the row is thrown away when the few minutes are up. There are no server logs of who visited what kept by this app.

Three kinds, all strictly necessary or your own settings, none of them shared with anyone: the session cookie that keeps you signed in, a note of whether your shelves should include club books, and a note of how you like genres ranked. No tracking cookies, so there is no banner to click away.

The people in your clubs. Your name, avatar, scores after a reveal, comments, tier lists, profile and personal shelf are visible to the members of the clubs you are in — and to nobody else with an account. Somebody who shares no club with you cannot open your profile or your shelf; they cannot see that you exist.

Nobody, until the meeting. Scores stay hidden — from every member and from the club's admin — until the admin reveals them, and a draw pick stays secret until the wheel lands on it. That is the point of the app, and the rule every new feature is checked against.

Whoever runs the site. Honestly: the person who operates Bookclub holds the keys to the database and the hosting, so they could read anything in it. The app deliberately gives them no door — running the site is not a way into a club, and no page or query opens for it — but no software can promise you more than that about the person holding the keys. They do not read your clubs, and they need your permission to use anything of yours for anything.

The database and the login are hosted by Supabase in Stockholm; the site itself runs on Vercel, with its servers pinned to the same region. When you search for a book to add, the words you type are sent to Open Library (the Internet Archive) to find it — nothing about you goes with them. Covers are loaded from Open Library's servers, which means they see that a cover was fetched. Nothing else is sent anywhere.

Your account and what you wrote stay while the account exists. You can close it yourself at any time, from Account settings, and you choose what happens to what you did in your clubs: leave the scores and comments behind with your name taken off them, so the averages the club remembers do not move, or erase them along with everything else. Either way your login, your email, your name, your avatar, your shelf, your bookcase, your tier lists and your draw picks are deleted, and deletion is immediate — there is no grace period in which somebody could change their mind for you. Backups of the database may hold a copy for a short while after that, until they age out.

To see what is held about you, to correct it, to take it with you, or to have it deleted. Your name and avatar you can change yourself in Account settings; deletion you can do yourself in the same place; a club's rankings can be exported as a CSV from its rankings page. For anything else — a copy of everything, or a question about any of this — ask whoever invited you to the club; this site is not open to the public yet, and there is no support address to publish until it is. If you are in the EU or the UK you can also complain to your data protection authority.