Our Privacy Policy

1. Introduction

Leabharlann respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

This policy complies with GDPR (General Data Protection Regulation) and other applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, password (encrypted)
• Library Data: Books you save to your personal library
• Contact Messages: Name, email, subject, and message content when you contact us

2.2 Automatically Collected Information

• Usage Data: Pages visited, time spent, interactions (only if you accept cookies)
• Device Information: Browser type, IP address (anonymized), device type
• Cookies: See Section 5 for details

2.3 Information from Third Parties

• Firebase Authentication: Email verification status, authentication tokens
• Open Library API: Book metadata (publicly available data)
• EmailJS: Email delivery status for contact forms

3. How We Use Your Information

We use your personal data for the following purposes:

• Account Management: Creating and managing your account, authentication
• Service Provision: Storing your book library, providing book recommendations
• Communication: Responding to contact form inquiries, sending account-related emails
• Analytics: Understanding how users interact with our Service (only with consent)
• Security: Detecting and preventing fraud, abuse, and security incidents
• Legal Compliance: Complying with legal obligations and enforcing our Terms

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

• Consent: Analytics cookies, email marketing (if applicable)
• Contract Performance: Providing the Service you signed up for
• Legitimate Interests: Security, fraud prevention, service improvement
• Legal Obligation: Complying with laws and regulations

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and core functionality (no consent needed)
• Analytics Cookies: Google Analytics (only loaded with your consent)
• Preference Cookies: Remembering your cookie consent choice

5.2 Your Cookie Choices

You can:

• Accept or decline cookies via our banner
• Change your browser settings to block cookies
• Delete cookies already stored on your device

Note: Blocking essential cookies may prevent you from using certain features.

6. Data Sharing and Third Parties

6.1 We Share Data With

• Firebase (Google): Authentication and database hosting
• EmailJS: Contact form email delivery
• Google Analytics: Anonymous usage statistics (with consent)
• Open Library: Book data retrieval (no personal data shared)

6.2 We Do NOT

• Sell your personal data to advertisers or third parties
• Share your email or library data with anyone
• Use your data for purposes other than stated in this policy

7. Data Security

We implement industry-standard security measures:

• Encryption: HTTPS for all data transmission, encrypted passwords
• Access Control: Only you can access your library data (via authentication)
• Firebase Security Rules: Database access restricted to authenticated users
• Regular Updates: We keep our systems updated with security patches

However, no system is 100% secure. We cannot guarantee absolute security.

8. Data Retention

• Account Data: Retained until you delete your account
• Contact Messages: Retained for 2 years, then deleted
• Analytics Data: Anonymized and retained for 14 months (Google Analytics default)
• Logs: Server logs retained for 30 days

9. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for cookies or marketing

To exercise these rights, contact us via our Contact Page.

10. Children's Privacy

Our Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. International Data Transfers

Your data may be processed in:

• European Union: Firebase servers (GDPR compliant)
• United States: Google services (Privacy Shield certified, GDPR safeguards in place)

We ensure appropriate safeguards are in place for international transfers.

12. Google AdSense (If Applicable)

If we enable Google AdSense in the future:

• Google may use cookies to serve ads based on your interests
• You can opt out of personalized ads at Google Ads Settings
• We will update this policy and obtain your consent before enabling ads

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance.

14. Contact Us

For privacy-related questions or to exercise your rights, contact us via our Contact Page.

Data Controller: Leabharlann

15. Supervisory Authority

If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.