Privacy policy

Data controller

FUJI AGENCY, a simplified joint-stock company (SAS), is responsible for personal-data processing carried out through Inkshelf.

Contact

[email protected]

Data we process

• Account: name, email address and a password hash; login sessions are stored to keep your account authenticated.
• Library and activity: books, ISBNs, authors, covers, statuses, progress, notes, quotes, collections, series, loans, ratings, goals, reading logs and reading sessions.
• Optional features: language preference, separate choices for usage events and session replay, push subscription when enabled and public-sharing settings.
• Usage measurement, after consent: generic events related to feature activation. A pseudonymous account identifier may link these events after sign-in. No title, ISBN, note or quote is intentionally included.
• Optional mini-survey: after the first book is added, a single-choice question may be shown to people who accepted usage measurement. If you answer, your choice is sent to PostHog. No free-text answer is requested.
• Session replay, after separate consent: a reconstruction of screens, interactions and scrolling. Visible text, fields and attributes that could contain personal data are masked; images, media, network requests and console logs are not captured. Screen structure and geometry remain visible.
• Security: your IP address may be used temporarily by abuse-prevention and rate-limiting mechanisms. Session cookies are required for the account to work.

Purposes and legal bases

• Provide the account, library, import, reading tracking, export and requested features: performance of the requested service.
• Protect accounts, limit abuse and send service-critical messages: legitimate interest and measures necessary to provide the service.
• Display a public library page or send notifications: your voluntary activation of the relevant feature, which you can turn off.
• Measure usage and collect an optional mini-survey response to improve the product: your usage-measurement consent, which you can withdraw at any time in measurement preferences. Session replay requires separate consent.

Public sharing

Sharing is off by default. When you enable it, the public page shows your name and books marked as read, with the information needed to present them, such as title, authors, cover and rating.

Private notes, quotes, detailed progress, sessions and reading logs are not shown on that public page. You can turn sharing off in settings.

Providers and external services

• Book searches and covers may be sent to the metadata providers used by the application, including Open Library, BnF and, if you configure it, Google Books.
• Password-reset emails are sent through Resend. Only information needed for delivery, such as the email address, name and temporary link, is sent to that provider.
• Usage events, mini-survey responses and, if you separately consent, session replays are sent to PostHog Cloud through its EU ingestion endpoint. Requests may contain technical data needed for ingestion, such as the IP address; the PostHog project must be configured to discard IPs from stored events. For replays, text and fields are masked before sending, media is blocked and no network requests are recorded.
• Hosting infrastructure and the database are operated on the publisher’s behalf by the hosting providers configured for the service.

Retention and deletion

Account and library data are kept while your account is in use. You can request account deletion from settings; this deletes the account and data attached to it, subject to legal obligations and technical backup copies during their normal lifecycle.

Password-reset tokens expire after one hour and are invalidated after use.

Cookies and local storage

Inkshelf uses a strictly necessary session cookie and a language cookie to remember your preference. The theme and some interface settings may be stored in your browser’s local storage. Your separate choices for usage events and session replay are stored on this device. You can change or withdraw them in measurement preferences under Settings or on this policy page. The application does not use advertising cookies.

Security and automated decisions

The publisher implements proportionate technical and organisational measures to protect accounts and data, including hashed password storage, time-limited sessions and protections against abusive attempts.

Inkshelf does not make automated decisions that produce legal effects or similarly significant effects on users.

Your rights

You may contact FUJI AGENCY to exercise applicable rights, including access, correction, erasure, restriction, objection and portability where applicable.

Email

[email protected]

Complaint

You may also contact the French data-protection authority, CNIL.