Privacy

What this page covers

This page covers My Tsundoku, the app and its site at www.my-tsundoku.app.

Who publishes this site

This site is published by William Revah, as an individual. He decides what is collected here and why: in data-protection terms, he is the controller of everything this page describes.

Hosting

This site is hosted by Vercel: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States, privacy@vercel.com. Like any host, Vercel receives your IP address and the headers of your requests in order to serve the pages; on the plan this site uses, its request logs are kept for one hour. Its servers may be outside the European Union: Vercel takes part in the EU–US Data Privacy Framework and also uses the European Commission's standard contractual clauses.

By default, on your device

Without an account, your books, notes and settings are stored in your browser's own database on this device, and nothing from your library leaves it, apart from the searches described below. The app sets no cookie.

If you turn on sync

To find the same library on several devices, you sign in with your e-mail address: a one-time code is sent to it, with no password. Your library is then copied to Supabase, which provides the database, the sign-in and the image storage, in its West EU region, in Ireland.

What is sent: your e-mail address; for each book, the title, the author, the ISBN, its Open Library identifier if it has one, the column it sits in and its place there, whether you are reading it, your notes, the shop link if you entered one, the cover address, and the dates it was added, changed and deleted; and the cover photos you take. Your session is kept in your browser's local storage.

Legal basis: providing the sync you asked for by signing in.

Deleted books

When you delete a book while sync is on, it is marked as deleted rather than erased, so that your other devices delete it too. Thirty days later, everything you wrote about it (title, author, notes, cover) is erased from Supabase and its cover photo is deleted; only an empty marker remains, so that a device that was offline longer still learns the book is gone.

Cover photos

A cover photo is cropped and reduced to 400 pixels at most before it is sent, and stored in a folder named after your account. Anyone who has its exact address can open it without signing in; that address contains your account's long random identifier and the book's, and it is listed nowhere, not even on a public shelf.

The shared catalogue

Contributing to the shared catalogue is on by default. When a book that has no Open Library record (one you typed in yourself, or found through the BnF or the shared catalogue) is synced, its title, author and ISBN are copied into a shared catalogue that helps other readers find it. The copy carries no link to your account, so it stays in place if you delete your account.

To stop it: Settings → « Contribute to community catalog ». Books already copied stay in the catalogue.

Your shelf is never public

The publisher shows a public shelf on his own site, but it can only show his own books: no setting in the app and no request lets another account appear on it.

Searches

When you scan an ISBN or search for a title, the search goes straight from your browser to Open Library and, if needed, to the BnF catalogue; the covers found are loaded from Open Library. When you type a title by hand, it is also looked up in the shared catalogue at Supabase, with or without an account. Each of these services receives the search and your IP address, as any site you visit does.

Page counts, without cookies

Page views are counted with Umami, an open-source analytics tool that the publisher runs himself at s.revah.paris, hosted on Vercel with a Neon database located in Frankfurt, Germany. The script sets no cookie and writes nothing to your device.

Your IP address is combined with your browser's identification and a secret value that changes every month to compute an anonymous visit identifier; the address itself is not recorded. What is recorded: the page viewed, the referring site, the browser, the operating system, the device type, the screen size, the language, and an approximate location (country, region, city) derived from the IP address. These figures only tell the publisher which pages are read; they are neither sold nor shared. Visit records are deleted automatically after 13 months.

Legal basis: the publisher's legitimate interest in knowing which of his pages are read.

Export and deletion

Settings → Backup → « Export my library »: download your whole library as a JSON file, at any time, with or without an account.

Settings → Account → « Delete account & data »: erases your books, your sync record, your profile, your cover photos and your account at Supabase. Your books stay on this device. If a photo cannot be removed at once, it is removed by a daily cleanup, and the app tells you so; if even that cannot be scheduled, the app asks you to write in. Synced data is kept for as long as your account exists.

Your rights

You can ask to see the data that concerns you, to have it corrected or erased, and you can object to its processing. Write to privacy@revah.paris; you will get an answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data-protection authority.

Contact

For any question about your data, or to use one of the rights this page describes, write to privacy@revah.paris. No postal address is published: the publisher is a private individual.

Changes

When this page changes, the date at the top changes with it.