Privacy and cookies

Two cookies are essential and cannot be turned off without breaking sign-in. A session cookie identifies you once you have logged in, and a CSRF token protects the sign-in form from being submitted by another site on your behalf. Both are set by NextAuth, are restricted to this domain, and are removed when you sign out.

Your cookie choice itself is stored in your browser’s local storage rather than in a cookie, so declining does not require setting the thing you declined.

We do not currently run analytics or advertising cookies. If that changes, the optional consent you gave will be what decides whether they load — the banner is in place ahead of the need so nothing is added behind your back.

When you register we keep your name, email address, country and — if you provide one — a phone number and avatar. The country determines the currency your prices are shown in and, for authors, which payout rails are available to you.

For readers we keep your purchases, your library, reading progress, cart, wishlist and any reviews you write. For authors we additionally keep your published work, sales and earnings, and the payout account you nominate.

Payout bank details are stored so transfers can be made. Account numbers are never sent back to the browser in full — the dashboard shows only the last four digits.

Payments and payouts are processed by Flutterwave, which receives the details needed to take a payment or make a transfer. Book covers, files and audio are stored with Cloudinary. Verification emails are sent through our email provider.

We do not sell your data, and we do not share it with anyone beyond the providers needed to run the service.

A review you write is shown publicly against the book, with your name, once a moderator approves it. You can edit or delete your own reviews at any time from your dashboard; an edited review returns to the moderation queue before it reappears.