Skip to content
← Back to Home

Privacy Policy

Last Updated: June 7, 2026

Thank you for choosing Ether & Ink! Your privacy matters to us. This Privacy Policy explains how we collect, use, and protect your information across our apps and services, including Bibliomancy and Lore Night.

1. Information We Collect

Local Data (Stored on Your Device by Default):

  • Your book library (titles, authors, page counts, cover images)
  • Reading progress and statistics
  • Personal notes, quotes, and journal entries
  • Achievement progress and familiars
  • Reading goals and preferences
  • App settings and preferences

Cloud Backup (Authenticated Users Only):

When you sign in with Google or email, your personal library data is backed up to enable cross-device sync and restore. This includes your books, reading logs, achievements, familiars, quotes, journal entries, and reading goals. This backup is opt-in — it only happens when you sign in. Anonymous users keep all data local.

Authentication Data (When You Sign In):

  • Email address: Collected when you sign in via email magic link or Google OAuth. Used solely for authentication. Stored by our authentication provider (Supabase Auth).
  • Google account info: If you sign in with Google, we receive your email and display name from Google. We do not access your Google contacts, calendar, or other Google services.

Optional Social Features (If Enabled):

  • Wizard/Wizardess display name (chosen by you)
  • Reading statistics for leaderboards
  • Anonymous identifier (randomly generated, not linked to your device or identity)

Community Book Catalog (Automatic):

  • Book titles and authors (factual, non-personal data)
  • Anonymous aggregated reading counts (e.g., "5 people are reading this")
  • Your votes on book elements/tags (e.g., "fantasy", "adventure")
  • AI-generated book synopses: For books without publicly available descriptions, we may use AI to generate a brief synopsis based on the book's title and author. These are clearly labeled as "AI-generated."

Community Journal Sharing (Optional):

  • Notes you choose to share are visible to all users
  • Shared content is checked against community guidelines before submission
  • Book element votes are stored with your anonymous user ID
  • Your reading status contributes to community "hot books" rankings

Reading Parties (Optional):

  • Party membership and reading progress are visible to party members
  • Party names and book titles are visible to all users browsing active parties
  • Helper signup profiles (preferred classes, genres, wizard name) are visible to all community users
  • Recruitment invites and notifications are stored securely and visible only to the intended recipient

Note: When you change a book's reading status, we share only the book's title and author with our community catalog. Your specific reading activity is NEVER publicly linked to your identity — we only store anonymous aggregate counts.

Device Permissions (Bibliomancy): All device permissions are optional. You can deny or revoke any of them in your device settings; only the related feature will be affected. The list below applies to Bibliomancy on both iOS and Android — some permissions may only be requested on one platform today, but the intended use is the same on both.

  • Camera: Used solely to scan book barcodes (ISBNs) when adding books to your library. Camera frames are processed on-device for barcode recognition and are never stored, transmitted, or shared.
  • Photo Library / Photos: Used to let you pick a custom cover image for a book from your own photos, and to save or share cover images you choose to export. We only access images you explicitly select — we never scan or upload your photo library.
  • Notifications: Used to send optional reading reminders (e.g., to help maintain your reading streak), trivia reminders, and, if you opt in, community alerts such as reading party invites. No notification content is shared with third parties.
  • Scheduled / Exact Alarms: Used to deliver your reading-streak and trivia reminders at the specific times you choose. No data leaves your device for this.
  • Run at Startup / Boot Completed: Used only to reschedule your local reminders after your device restarts, so your reading reminders continue to fire at the right time.
  • Background Book Enrichment: Used to fetch cover images, ISBNs, page counts, genres, and short synopses from public book sources (Open Library, Google Books, Wikipedia) after you add a book to your library, so your newly added titles are fully illustrated even if you navigate away from the Add Book screen. Shows a progress notification while it runs and stops as soon as enrichment is complete. No personal data is transmitted — only the book title, author, and ISBN are sent to these public sources.
  • Cloud Library Sync: If you are signed in, your library changes (books, reading progress, notes, quotes, achievements) are uploaded to your secure cloud backup so they can be restored or synced across devices. This runs as a standard background task and does not require a persistent notification.
  • Vibration / Haptics: Used for subtle haptic feedback on notifications and in-app interactions. No data is collected.
  • Network / Internet: Used to fetch book metadata and covers from public APIs (Open Library, Google Books, Wikipedia) and, if you sign in, to sync your library with our secure cloud backup.

We do NOT collect:

  • Your real name or personal identity (beyond email for authentication)
  • Phone numbers
  • Passwords (authentication is handled by Supabase Auth / Google)
  • Location data
  • Payment information
  • Data from other apps

Analytics & Crash Reporting:

We use Firebase Analytics and Firebase Crashlytics (provided by Google) to collect anonymous usage analytics and crash reports. This data helps us understand how the app is used and diagnose technical issues. Firebase may collect:

  • Crash logs and stack traces
  • App performance metrics
  • Anonymous usage statistics (e.g., screens visited, features used)
  • Device type, operating system version, and app version

This data is collected in aggregate and is not linked to your personal identity. For more information, see Google's Privacy Policy.

Anonymous by Design: Our apps use randomly generated anonymous identifiers instead of traditional accounts for community features. Your identity on leaderboards and reviews is simply a random string (UUID) plus a wizard name you choose. This identifier is not derived from any device hardware or personal information.

2. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Consent: For cloud backup, community features, and authentication — you actively opt in by signing in or using social features.
  • Legitimate Interest: For local app functionality (displaying your library, tracking reading progress) — this processing is necessary for the app to function as expected.
  • Contract Performance: For account management when you create an authenticated account.

You may withdraw consent at any time by signing out, deleting cloud data via Settings, or uninstalling the app.

3. How We Use Your Information

  • To display your book library and reading progress
  • To track achievements and reading goals
  • To provide personalized reading statistics
  • To authenticate your account (if you sign in)
  • To back up and sync your library data across devices (if you sign in)
  • To display your chosen name on public leaderboards (optional)
  • To show community reading activity (e.g., "12 people are reading this book")
  • To display community-voted book elements/tags
  • To improve app functionality and user experience

4. Data Storage & Security

Local Storage: All your book data, reading progress, and personal notes are stored locally on your device using encrypted database storage.

Cloud Backup (Authenticated Users Only): When you sign in, your personal library data is backed up to our secure servers. This enables cross-device sync and restore. Anonymous users keep all data local.

All cloud data is:

  • Encrypted in transit using HTTPS (cleartext traffic is blocked)
  • Protected by Row Level Security (only you can access your own data)
  • Stored on secure, access-controlled servers
  • Never sold to third parties
  • Deletable via the "Delete Cloud Data" option in Settings

5. Data Sharing

We do NOT sell your personal data. Ever.

Your data may be shared only in these circumstances:

  • With other users: Only your chosen display name and reading stats on public leaderboards
  • Community catalog: Anonymous, aggregated counts — never linked to your identity
  • Legal requirements: If required by law or valid legal process
  • With your consent: If you explicitly choose to share
  • Service providers: Supabase (database and authentication hosting) under their privacy agreements

6. Lore Night (Companion Web Experience)

Lore Night is a multiplayer book trivia game that connects to your Bibliomancy account. When you use Lore Night:

Data Collected:

  • Wizard name (your chosen display name — visible to other players in your room)
  • Familiar selection (which familiar avatar you use)
  • Game scores, answers, and streaks during gameplay
  • A random device identifier stored in your browser (localStorage)
  • Room codes and game session data

Data Shared with Other Players:

  • Your wizard name and familiar avatar are visible to all players in your game room
  • Your score and streak are visible in real-time during gameplay
  • Leaderboard scores are visible to all Lore Night users

Data Retention:

  • Game rooms and answer data are automatically deleted after 24 hours
  • Leaderboard entries are retained until you request deletion
  • Browser localStorage data persists until you clear your browser data
  • Session data (sessionStorage) is cleared when you close the browser tab

Authentication: If you log in with your Bibliomancy account via magic link, Lore Night accesses your wizard name and unlocked familiars from your existing Bibliomancy profile. No additional personal data is collected beyond what Bibliomancy already stores.

7. Third-Party Services

  • Open Library API: Book covers and metadata (no personal data shared)
  • Google Books API: Book information and new releases (no personal data shared)
  • Wikipedia API: Book descriptions (no personal data shared)
  • Open Trivia Database: Trivia questions (no personal data shared)
  • Supabase: Cloud database and authentication
  • Firebase Analytics: Anonymous app usage analytics (provided by Google; see Google's Privacy Policy)
  • Firebase Crashlytics: Crash reporting and diagnostics (provided by Google; see Google's Privacy Policy)

Affiliate Disclosure: If you buy books linked to our site, we may earn a commission from Bookshop.org, whose fees support independent bookshops. Purchases support local bookstores at no extra cost to you.

We make HTTP requests to Bookshop.org to verify affiliate link availability. This may transmit book ISBN information to Bookshop.org. No personal data is shared in these requests.

8. Children's Privacy

Our apps can be used locally by users of any age. Community features and cloud backup require signing in, which is restricted to users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us for immediate removal.

9. Your Rights

All Users:

  • Access: View all data we have about you within the app
  • Export: Download your library data at any time (JSON or CSV format)
  • Delete: Remove local data by uninstalling, or delete cloud data via Settings
  • Opt-out: Don't sign in to keep all data local

GDPR (European Users):

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten") — use "Delete Cloud Data" in Settings or contact us
  • Restrict processing
  • Data portability — export in JSON or CSV
  • Object to processing
  • Lodge a complaint with your local Data Protection Authority
  • Withdraw consent at any time

CCPA/CPRA (California Users):

  • Know what personal information is collected, used, and shared
  • Delete your personal information
  • Correct inaccurate personal information
  • Opt-out of the sale or sharing of personal information (we do not sell or share your data)
  • Non-discrimination for exercising your rights

10. Data Retention

  • Local data: Retained until you delete it or uninstall the app
  • Cloud-synced personal data: Retained until you delete it via Settings or request deletion
  • Authentication data: Retained until you delete your account
  • Community data: Retained until you request deletion or 2 years of inactivity

11. Account & Data Deletion

You can delete your Bibliomancy account and all associated cloud data at any time. You do not need to install or re-install the app to request deletion.

In-app (fastest):

  1. Open Bibliomancy and go to Settings.
  2. Tap Delete Cloud Data to erase all of your cloud-synced library, journal entries, achievements, reading parties, and community data.
  3. Sign out to remove your authentication record.

Email request (works without the app):

If you no longer have the app installed, or would prefer to request deletion directly, email admin@etherink.net with the subject line "Delete my Bibliomancy account" from the email address you signed up with. We will confirm deletion within 30 days, though we typically act much faster.

What gets deleted:

  • Your authentication record (email, Google sign-in association)
  • Cloud-synced library, reading progress, notes, quotes, and journal entries
  • Wizard name, familiar bond, and community profile
  • Reading party membership, votes, and leaderboard entries
  • Any shared quotes or notes you submitted to the community

What may be retained: Anonymous aggregate community data (e.g., "5 people are reading this book") that contains no identifier linking back to you, and any records we are legally required to keep.

12. Data Protection Contact

For privacy questions, data access requests, or data deletion requests:

European users may also contact your local Data Protection Authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through our apps. We will not reduce your rights under this policy without your explicit consent.

Created with care by Ether & Ink LLC