Privacy Policy

When you create an account: email address, username, and a securely hashed password (Litlio never stores your password in plain text). If you sign up with Google or Apple instead, Litlio stores the identifier those providers give it in place of a password.

Optional profile info you add: display name, bio, avatar image, country, and interface language.

Books you log, ratings, reviews and comments you write, shelves and lists you create, and who you follow. Whether this is visible to other members depends on your privacy setting.

In the mobile app, if you complete Reading DNA onboarding: your selected genres, favorite books, and reading-personality answers, used to compute recommendations. This is never shown on your public profile.

Litlio does not use analytics or advertising trackers, does not sell your data, and does not set any marketing or analytics cookies. See the Cookie Policy for the specifics of what's actually stored in your browser.

Litlio sets exactly one cookie: an authentication token that keeps you signed in, which is strictly necessary for the service to work and can't be turned off without signing out.

Litlio also stores a small amount of preference data in your browser's local storage (not a cookie): your interface language, theme, and region choice, and, if you're signed out, an in-progress country preference. None of this is used for tracking. See Cookie Policy / Cookie Settings for details.

If you contact support (bug report, question, feature suggestion, content report), Litlio stores what you submitted and, if you're signed in, your account so we can follow up.

If you subscribe to The Litlio Letter, Litlio stores your email address and interface language, only to send that newsletter. You can unsubscribe at any time.

"Buy on Amazon" links are affiliate links. Litlio records that a click happened (which book, which country's store, where on the site) to understand what's useful. It never receives your payment details, which Amazon handles entirely on its own site.

Resend, Litlio's email provider, for sending support replies and the newsletter, and for receiving email sent to Litlio's contact address.

Discord, only when you write to Litlio's contact address: a private notification says that an email arrived and repeats your address, its subject line and the time. The message itself is never sent there — no content, no attachment, no link — and it can't be read or answered from Discord.

Google and Apple, only if you choose to sign in with them.

Google Books, Hardcover, and Open Library, which supply catalog data. Litlio sends them search terms, never your personal account data.

Other Litlio members, for whatever your privacy setting makes visible (public profile fields, and your activity if your profile isn't private).

You can edit or remove most profile information yourself from Settings.

You can delete your account yourself, from Settings on the web or in the mobile app. To confirm, you type your username, and your password as well if your account has one. Deletion is permanent and can't be undone.

Deleting removes the personal data of the account itself: your profile, your reading activity, and the ratings, reviews, comments, likes, follows and Reading DNA attached to it. Some shared contributions — reading groups you created, notifications you triggered, reports you filed — are kept in an anonymised form, with your identity removed, so the community spaces they belong to stay intact.

Support messages are handled separately. When a message used your account's email address automatically, that address is removed along with the account. What you provided on purpose — a different contact address you entered, and the content of the message — can be kept so the request can still be handled.

A newsletter subscription is stored separately from your account and isn't affected by deleting it; you can unsubscribe from the link in any newsletter email.

You can request a copy of your data by reaching out through Contact us.

If what Litlio stores or how it's used changes meaningfully, this page will be updated with a new date above.

Questions about privacy can be sent through the Contact us page.