Privacy Policy

Last updated: October 8, 2026

Draft. This policy describes how the BookReplay software handles data, but it has not had a legal review. It still needs the operator’s legal name, a contact address and the hosting provider before it is final.

This policy covers the BookReplay website and the hosted version of BookReplay (“the hosted app”). If you run BookReplay on your own server, we receive none of your data; the section on self-hosting explains what your instance sends elsewhere.

What we store

When you use the hosted app we store:

  • Your account: your name, your email address and a hash of your password. We never store the password itself.
  • Your library: the highlights you import from your Kindle clippings file, the books they belong to, and any edits you make to them.
  • Your review history: when you reviewed each highlight and the rating you gave it, which is what the schedule, the daily goal and the streak are built from.
  • A session: a record that you are signed in, which expires after 30 days without activity.

Cookies

The hosted app sets one cookie, bookreplay.sid, which keeps you signed in. It is not readable by scripts and is only sent to BookReplay. We do not use advertising or tracking cookies. This website sets no cookies; it remembers your light or dark theme choice in your browser’s local storage.

What we send to others

  • Book lookups. To find a cover and the author’s name, the hosted app sends a book’s title and author to Open Library, and to Google Books when Open Library has no good match. The text of your highlights is never included.
  • Cover images. Covers are loaded by your browser directly from Open Library, the Internet Archive or Google Books, so those services see your IP address when a cover is displayed.
  • Email. We send you a confirmation link when you sign up and a reset link when you ask for one. These go through an email delivery provider, which receives your address.

We do not sell your data and we do not share it for advertising.

How we use it

We use your data to run the service for you: to show your library, schedule your reviews and keep your account secure. Sign-in attempts are rate limited by IP address. Administrators of the hosted app can see the list of accounts and aggregate figures such as how many people are active; these figures are counts, not the content of anyone’s highlights.

Keeping and deleting your data

We keep your data for as long as you have an account. Deleting your account removes your books, highlights and review history. The app does not have a delete button yet, so contact us to have your account deleted.

Self-hosted BookReplay

A self-hosted instance stores everything in your own PostgreSQL database and does not report to us. Unless you turn metadata lookups off, it sends book titles and authors to Open Library (and to Google Books if you configure an API key), and browsers load cover images from those services.

Changes

If this policy changes, we will update the date at the top of this page.