Privacy Policy

Boeklet (“we”, “us”) is the controller of your personal data. For any privacy question or request, contact hello@boeklet.com.

• Account. Your email address and the username (and optional display name) you choose. Sign-in is handled by our authentication provider, Clerk.
• Approximate location.Only if you grant your browser's location permission, we use your coordinates to show books near you and to set your city/neighbourhood. Map pins are fuzzed to the neighbourhood and we never display your exact address.
• Library activity. The books you add, copies you hold or pass on, hand-offs, book requests, your credit balance and history, and reading progress.
• Reading preferences. Your private enjoyment scores, characteristics you explicitly say you enjoyed or avoided, books you choose to use as taste examples, and saved reading-taste choices.
• Content you create. Messages to other members, margin notes, replies, posts, ratings, and wishlist entries. Notes and posts are visible to other readers of the same book.
• Technical data. Basic logs needed to run and secure the service.

• To provide the service (performance of a contract): accounts, circulation, hand-offs, messaging, credits, reading profiles.
• Location is processed on the basis of your consent, which you give through the browser permission and can withdraw at any time in your device settings.
• Legitimate interests: keeping the service safe, preventing fraud, and sending transactional emails (e.g. a book request waiting on you, or your book reaching a new reader).

We never sell your data. The public book pages carry ads from Google AdSense. If you have not accepted cookies you still see ads, but limited ads: no cookies for personalisation and no profile built from your behaviour. Accepting lets those ads be personalised. Your account data is never shared with advertisers, and the rest of the app carries no ads at all.

We share data only with service providers that help us run Boeklet, under data-processing agreements:

• Clerk: authentication and account management.
• Convex: application database and backend (hosted in the United States).
• Cloudflare: hosting, content delivery and book metadata processing through Workers AI and AI Gateway.
• Resend: transactional email delivery.
• Microsoft Clarity: privacy-friendly product analytics (heatmaps and session replay), loaded only if you accept analytics cookies. No ads, no data selling.
• Google Analytics: aggregate usage statistics (page views, feature usage), loaded only if you accept analytics cookies. Configured without advertising features; no data selling.
• Google AdSense: ads on the public book pages only. Without your consent these run as limited ads, which set no personalisation cookies; with your consent Google may set advertising cookies to select and measure ads. Either way it receives no account data from us.
• Google Books and Open Library:book metadata lookups (we send an ISBN, not your personal data).
• OpenStreetMap (Nominatim): turning coordinates into a neighbourhood name when you use location.
• bol.com:“buy new” partner links on some book pages. We send a book's ISBN to look up its listing; if you follow a link, bol.com sets its own cookies on their site (not ours) and we may earn a commission on a purchase.

Some providers are based outside the EU (including the United States); where that is the case, transfers are covered by appropriate safeguards such as the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

We keep your data while your account is active. When you ask us to delete your account, we remove your personal data, except records we must keep for legitimate reasons (for example, an anonymised credit ledger entry tied to another member's hand-off). Public margin notes you left on a book may remain visible in anonymised form so the book's shared history stays intact; tell us if you want them removed.

Private enjoyment scores and taste examples remain until you change them or delete your account; they are not removed when a physical copy is passed on or leaves your shelf.

Under the GDPR you can:

• access the personal data we hold about you;
• correct it if it is wrong;
• have it deleted;
• receive a copy in a portable format;
• object to or restrict certain processing;
• withdraw consent (e.g. location) at any time.

To exercise any of these, email hello@boeklet.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Boeklet uses essential cookies, set by Clerk to keep you signed in. These need no consent. With your consent, we also use Google Analytics and Microsoft Clarity analytics cookies (usage statistics, heatmaps and session replay) to understand how the app is used and improve it. These load only if you acceptin the notice shown on your first visit; choosing “Essential only” means no analytics cookies are set. The public book pages carry Google AdSense either way: decline, and they run as limited ads that set no personalisation cookies; accept, and they may be personalised.

To measure book demand and learn which titles to bring to the community, we keep anonymous per-book counters (how many times a book page is viewed, and how many searches a title gets). These hold no personal data, no name, email, or IP. Counting how many distinct people searched for a title uses a single first-party cookie holding a random id, set only if you accept analytics cookies (or, if you are signed in, tied to your account, needing no extra cookie); the plain view and search tallies are anonymous and need no cookie.

Boeklet is not intended for people under 16. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy as the service grows. We will change the date above and, for material changes, let you know in the app.