Privacy

1. Who is responsible for your data

Denis Fedorovici, str. Studenților 5, MD-4839 Stăuceni, mun. Chișinău, Republic of Moldova.

Questions about data: [email protected].

2. Legal bases

Contract (Art. 6(1)(b) GDPR): the account, books, reading, purchases from authors, “Help”.

Consent (Art. 6(1)(a)): emails you choose, optional cookies if there ever are any.

Legal obligation (Art. 6(1)(c)): records of platform invoices, answers to lawful requests.

Legitimate interests (Art. 6(1)(f)): protection against abuse, moderation, anonymous reading statistics for authors.

Residents of the EEA and the UK have their rights under the GDPR and the UK GDPR where these apply.

3. What we keep

Account: email, name, password (only as a hash), photo if you uploaded one; with Google sign-in, its identifier, name, email and photo.

Author profile: the page address, description and the books you show.

Books and drafts in your account, with their pictures, music and video.

Reading: your place in books, library, endings found, ratings, reviews, comments, reports, followed authors, notifications.

Age: the year of birth, if you confirmed it for 18+ books.

Purchases from authors: what was bought, when, for how much and in which store, and the email you gave the store, so the purchase opens in your account. We hold no card details.

Authors with a store: the Gumroad or Patreon connection, the sales for the platform invoice, and the invoices.

“Help”: requests, messages and screenshots.

Technical data: IP address and browser, to protect against abuse and count book openings (the address stays in the server’s memory for up to 30 minutes), server logs, cookies and browser storage (section 10).

Studio drafts not yet moved to an account, and guests’ places in books, stay only in your browser — we do not have them.

4. Reading statistics for authors

So that an author can see how many readers opened a book, how far they read and where they stop, the reader reports openings and the pages of a playthrough. A playthrough is known only by a random number — no name, no email and no separate tracking identifier. Everyone is counted this way, guests and those who chose “Necessary only” cookies included. Authors see only the totals.

5. What we use it for

To run the account, the studio, the reader, the library, reviews and notifications; to open what you bought, invoice authors, answer in “Help”, moderate and protect the service; to send service emails and the ones you chose. We do not sell data and show no ads.

6. Who else handles it

Hetzner Online GmbH (Germany): servers and database.

Cloudflare, Inc. (USA): DNS, delivery and protection of the site, storage of book files (R2).

Resend (USA): sending emails.

Google (USA): Google sign-in, if you use it.

Gumroad, Inc. and Patreon, Inc. (USA): the authors’ stores. When you buy, you give your data to them, and they tell us about the purchase.

The payment service for platform invoices will join this list once invoices are issued.

Authorities and advisers, when the law requires it or to protect people and the service.

Other readers see your name on reviews and comments and your profile if you made it public. Authors never see your email.

7. International transfers and security

Some services process data outside Moldova and your country. For that we rely on contractual safeguards, including standard contractual clauses, and other lawful grounds.

Connections are protected with HTTPS, passwords are stored only as hashes, access to servers is restricted, and book files are served through signed links.

8. How long we keep it

For as long as the account exists. After “Delete account” signing in stops at once, and 30 days later the profile, books and their files, places in books, library, follows, settings, notifications and “Help” requests are erased.

What stays, without a name: reviews and comments, signed “Deleted reader”; books other readers bought from an author stay with them; records of purchases and invoices, for accounting and disputes, without the email.

Books outside the catalog of an author who hasn’t signed in for half a year: after two letters, a month and a week ahead, we delete them with their files; signing in keeps them.

A “Download my data” archive stays available for 7 days. Database backups are kept for 30 days, then erased.

9. Your rights

Get a copy of your data: “Download my data” in the settings; the archive comes by email.

Correct your data: in the settings.

Erase it: “Delete account”.

Restrict or object to processing, withdraw consent: emails are turned off in the settings or by the link in any email; for anything else write to [email protected].

Complain: to the National Centre for Personal Data Protection of the Republic of Moldova (CNPDCP) or to the supervisory authority of your EU country.

10. Cookies and browser storage

Necessary cookies remember your sign-in, the site’s language and your answer about cookies. Your browser keeps studio drafts, guests’ places in books and reading settings.

There are no third-party counters and no ads. If we ever add analytics, it will be only for those who chose “Allow all”.

11. Children

A Letopis account is for people aged 16 and over. Children have a separate site, “Letopis Kids”, with its own rules. If we learn that a child under 16 has opened an account, we delete it.

12. Changes

We announce material changes on the site and by email in advance.

13. Contact

[email protected] or “Help” on the site.