Terms & how we use your data
This page describes, in plain language, what bookwrym does with the information you give it and how that information is stored. It's a working draft — content will be reviewed and finalized before bookwrym is used to manage real collections, and nothing here should be read as legal advice or a certification of compliance with any specific law.
1. What this covers
bookwrym is a personal library manager: you catalogue books you own, track copies you've lent to other people, and browse authors within your own collection. It is not a social network — there is no public profile, no follower list, and no way for other users to see your shelf. These terms cover the account you create and the collection data you enter.
2. Your account & access
Accounts are set up by an administrator and signed into with an email and password. When you sign in, we set a session cookie that isn't readable by page scripts (an “httpOnly” cookie) to keep you signed in; if you choose “remember me,” a small flag is saved in your browser's local storage so your session can be restored on return visits. Signing out, or that session expiring, clears both.
3. What data we collect
We collect only what your account and your collection need to function:
- Account details — your email address and password (stored hashed, never in plain text).
- Collection data — the books, authors, and lending records you add: titles, genres, cover images, and who a book is lent to along with due dates.
- Preferences — settings like your library name, default loan duration, and date format.
We don't collect data to build advertising profiles, and we don't sell or share your collection data with third parties for marketing.
4. How we store it
Your data lives on bookwrym's backend service, reached only through our own servers — your browser never talks to it directly. Each account's collection is isolated from every other account: there is no shared or team view. We use industry-standard measures (encrypted connections, hashed passwords, access-controlled infrastructure) to protect it, and we'll publish specifics on hosting location and retention here once they're finalized.
5. Your rights
You can export your collection at any time from Settings. You can ask an administrator to correct inaccurate account details, or to delete your account and the collection data tied to it. We aim to act on deletion requests promptly and remove the underlying data rather than just hiding it from view.
6. Changes to these terms
If this page changes in a way that affects how your data is used, we'll update the date below and, where the change is significant, let signed-in users know directly rather than relying on a silent edit here.
Last updated: draft, not yet published.
7. Contact
Questions about this page or your data can go to your library's administrator. A dedicated contact address will be published here alongside the finalized terms.