We store the minimum needed to run Booktronaut: your account email (if you create one), display name, reading progress, owned books, newsletter email if you join the orbit list, and essential session cookies.
Account data, profile universe data, optional emails for free chapters or waitlists, purchase receipts when payments are enabled, and basic server logs (IP, user agent, timestamps) for security.
Hosting: Vercel (site and API).
Database: Neon (Postgres profiles and accounts).
Email: Hostinger SMTP via info@, support@ and orders@booktronaut.com.
Payments: Stripe when checkout is enabled (card data never touches our servers).
Analytics: first-party event beacons to our API; optional privacy-friendly analytics (no advertising cookies) when configured.
Account and reading data while your account exists. Guest cookies until cleared. Server logs typically up to 90 days. Purchase records as required for tax and accounting.
Access, correction, export, deletion, restriction and objection under GDPR. Export or delete from My Universe, or email privacy@booktronaut.com. You may lodge a complaint with your local supervisory authority (EU/EEA).
Contract (accounts, purchases), consent (newsletter, optional analytics where required), and legitimate interest (security, product improvement with privacy-respecting metrics).