Privacy
Privacy policy
Effective 19 July 2026. This policy describes Bookstarr's early-access service.
What Bookstarr stores
Bookstarr stores the name, email address, and Google account identifier needed to operate your account. It stores books, reading states, page progress, private reflections, explicit preferences, friendships, blocks, profile reports, league aggregates, and summary-guide state that you create through the service.
Why it is used
Account data runs authentication. Library and progress data power your library, recommendations, completion views, and explainable friend-league scores. Friendship data limits social features to accepted connections. Security logs, rate-limit buckets, and aggregated request metrics protect and operate the service.
AI summaries
General reading guides are generated once and stored. Personalized generation is asynchronous and uses minimized reading context. Names, email addresses, Google credentials, OAuth tokens, and private friend activity are excluded. Reflection text is excluded unless you explicitly opt in for that reflection.
Videos and outside services
Book metadata and covers may come from Open Library. Sign-in uses Google OAuth. A curated YouTube summary is not loaded until you choose Play, when YouTube receives the normal information sent by your browser. Bookstarr uses the privacy-enhanced youtube-nocookie.com embed domain.
Retention and control
Your profile includes a machine-readable data export and permanent account deletion. Deletion removes the account and associated library, progress, reflections, friendships, reports, personalized guides, product events, and sessions. General book catalog records and general guides are not account data and remain.
Sharing and sale
Bookstarr does not sell personal data. Profile and reading visibility follow your selected privacy setting, accepted friendship, and blocking rules. Operational providers receive only what is required to deliver their service.
Your choices and requests
Use Account and data while signed in to export or permanently delete your data. Depending on applicable law, you may also have rights to access, correct, restrict, object to, or request portability of personal data, and to withdraw consent where processing relies on consent.