Privacy policy

Last updated: October 2026

Postille is designed to handle as little data as possible. Here is which data, why, and what you can do about it.

Who is responsible

The data controller is Emanuele Vittori. For any request about your data, write to [email protected].

What data we handle

• Without an account: your library and notes stay on your device only (in the browser's or app's storage). We never receive them.
• With an account: email and password (the password is handled in encrypted form by the sign-in service: we cannot see it), display name, @username, bio, language, library visibility; books, reading statuses, ratings, reviews and shelves; notes and reading sessions (always private); quotes you choose to share; who you follow and who follows you; readers you block and reports you send or receive.
• Technical data: IP address and technical logs handled by our hosting and database providers to run the service and protect it from abuse.
• Anti-bot check: to protect sign-in, sign-up and password reset we use Cloudflare Turnstile, which checks your browser without puzzles and without advertising cookies. Cloudflare receives your IP address and technical browser data.
• Book search: the title, author or ISBN you search is sent to public catalogues (Google Books, Open Library, Apple Books and, for Italian books, to the Italian library catalogue (SBN) through our own intermediary service on Cloudflare, which stores nothing) to show you results. We do not send your name or email.
• Camera: if you scan a book's barcode, the image is read on your device and is neither saved nor sent: only the ISBN number is looked up.
• Lists and reading challenge: the titles of the lists you create and of the books you put in them; your reading goal only if you choose to show it on your profile.
• Notifications: they appear only inside the app (new followers and lists from readers you follow). We send no push notifications, emails or marketing messages.

Why we use it and on what basis

• To provide the service (account, sync, social features): necessary to perform the contract you accept by signing up.
• For security, abuse prevention and content moderation: our legitimate interest.
• To comply with legal obligations, where they apply.

We do no marketing, send no newsletters and do no advertising profiling.

What is public and what is not

• Notes are always private. A quote becomes visible only if you share it, and you can withdraw it any time.
• Your library is private by default. If you make it public, readers with an account can see your books, ratings and reviews.
• Your lists are private until you make them public: a public list can be opened by anyone with the link and an account. Your reading challenge shows on your profile only if you choose.
• Display name, @username, bio and follower counts are visible to other members so they can find and follow you.

Who we share data with

We use providers that process data on our behalf: Supabase (database and sign-in) and Cloudflare (website hosting). Book catalogues (Google Books, Open Library, Apple Books) receive only the text you search for. Where data is processed outside the European Economic Area or the UK, we rely on the safeguards required by law (such as standard contractual clauses). We do not sell your data.

Cookies and similar tools

We use no profiling cookies and no third-party analytics. We use your device's storage (localStorage and IndexedDB) only to make the app work: session, preferences, offline library.

How long we keep it

As long as you keep your account. From Settings → Delete account you immediately erase from the cloud your profile, library, reviews, notes, quotes, follows, blocks and related reports. Providers may keep technical safety copies for a limited time. Data saved on your device stays until you delete it.

Your rights

You can access, correct, delete, restrict, object to the processing of your data and receive it in a readable format (Settings → Export). Use the app or write to [email protected]. You can also complain to your data protection authority (for example the ICO in the UK, or your state attorney general or the FTC in the US).

Minimum age

Postille is for people aged 16 or over. If you think a minor has signed up, write to us and we will delete the account.

Changes

If we change this policy in an important way, we will say so in the app. The date above shows the latest version.