Privacy Notice for Libreya

Last Updated: July 2026

1. Identity and Contact Details

Libreya ("we," "us," "our") is the data controller responsible for your personal information on libreya.app. For any privacy question or request, contact us at hello@libreya.app.

2. Information We Collect

We collect only what is needed to run the service:

• Account Data: Email address, display name, and profile image, for registered users.
• Activity Data: Reading progress, favorites, and highlights — stored in your browser for guests, and synced to our database for registered users.
• Device and Usage Data: IP address, browser type, and general usage patterns, collected automatically for security and to serve relevant advertising.
• Cookies: We and our advertising and analytics partners use cookies and similar technologies. See Section 4.

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Performance of a Contract: To provide the reading service you requested.
• Legitimate Interests: To prevent fraud, secure the site, and support the free, ad-supported service.
• Consent: For personalized advertising cookies, which you can withdraw at any time.

4. Cookies and Advertising

Libreya is free to use and is supported by display advertising delivered through Google AdSense. Google and its advertising partners use cookies — including the DoubleClick/Google Ads cookie — to serve ads based on your visits to this and other websites. You can manage or opt out of personalized advertising using:

• Google Ads Settings
• the Digital Advertising Alliance opt-out page
• Your Online Choices (for visitors in the EU/UK)

You can also block or delete cookies through your browser settings at any time. Doing so may affect some site functionality.

5. Third-Party Sharing and Data Transfers

We do not sell your personal information. We share data with:

• Service Providers: Supabase, for authentication and database storage.
• Advertising Partners: Google AdSense, for displaying the ads that keep Libreya free.
• International Transfers: Data may be transferred to servers outside the EEA (e.g., the United States). We rely on Standard Contractual Clauses (SCCs) to safeguard these transfers.

6. Data Retention and Erasure

We retain account data for as long as your account remains active. Guest activity data is stored locally in your browser and is removed if you clear your browser storage. Registered users can permanently delete their account and all associated data — highlights, favorites, and profile — at any time from their Profile page.

7. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of the personal data we hold about you
• Correct inaccurate personal information
• Request deletion of your personal data
• Object to, or opt out of, the use of your data for personalized advertising
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at hello@libreya.app.

8. Children's Privacy

Libreya does not knowingly collect personal information from children under 13 (or the relevant age of consent in your jurisdiction). If we learn we have inadvertently collected such information, we will delete it promptly.