Privacy Policy
StarBookmark ("we", "us", or "our") operates starbookmark.com. This policy explains what data we collect, how we use it, and your rights.
1. What we collect
- Account information: your email address, a hashed (unreadable) version of your password, and your display name.
- Profile content: biography, favorite genres, and books you choose to add to your profile.
- Shelf photos: images you upload of your bookshelves. These are stored on our server and sent to OpenAI's API to identify book titles and authors. See section 4.
- Activity: bookshelves you create, reading lists, saved books, likes, comments, follows, book club participation, and messages.
- Technical data: your IP address (used for rate-limiting and security) and standard server access logs.
2. How we use your data
- To provide and improve the StarBookmark service.
- To process shelf photos and generate book recommendations.
- To display your public profile and shelves to other users (for content you have set as public).
- To send you transactional emails (e.g. password resets). We do not send marketing emails without your explicit consent.
- To detect and prevent abuse, fraud, and security incidents.
3. Who we share your data with
We do not sell your personal data. We share data only with:
- OpenAI: shelf photos you upload are processed by the OpenAI API to identify book titles. OpenAI's privacy policy applies to this processing: openai.com/policies/privacy-policy.
- Infrastructure providers: our hosting provider stores data on servers in order to run the service.
- Legal authorities: if required by law or to protect the rights and safety of our users.
4. Shelf photos and OpenAI
When you upload a shelf photo, the image is transmitted to OpenAI's API solely to identify book titles and authors. We do not use your photos to train AI models. Photos are stored on our servers and associated with your account. You can delete your account at any time to have your data removed.
5. Cookies and session data
We use a single session cookie to keep you logged in. We do not use third-party tracking cookies or advertising cookies.
6. Data retention
We keep your data for as long as your account is active. If you delete your account, your personal data and uploaded content will be removed within 30 days.
7. Your rights (GDPR)
If you are located in the European Economic Area, you have the right to:
- Access, correct, or delete your personal data.
- Object to or restrict certain processing.
- Receive a copy of your data in a portable format.
- Lodge a complaint with your local data protection authority.
To exercise these rights, use our contact form.
8. Children
StarBookmark is not directed at children under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by posting a notice in the app. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
10. Contact
Questions or requests regarding this policy: use our contact form.