---
title: Privacy policy
Metadescription: How Your Book Nest handles your data. Plain-English privacy policy covering what I collect, how I use it, and your rights.
author: Dan Edwards
author_role: Founder
updated: 2026-06-23
---

Token estimate: ~1,600

# Privacy policy

By **[Dan Edwards](https://yourbooknest.com/contact)**, Founder.

## The short version

Your Book Nest is built and run by me, Dan Edwards. I collect the minimum data needed to run the service. I don't sell it, share it with advertisers, or do anything unexpected with it. Your payment details go directly to Stripe - I never see your card numbers.

## What I collect

When you create an account, I store

-   Your name and email address
-   The name of your library
-   A hashed version of your password (never stored in plain text)

As you use the service, I also store

-   The items, copies, loans, and patron records you create
-   Library settings you configure (loan periods, library details)
-   Your currency (detected automatically from your country) and timezone

I do not collect or store payment card details. Payments are handled entirely by Stripe.

## Patron records

A patron is usually just a name. Anything else a library records about a patron is held on the library's behalf, used only to run that library's lending, and never shared or used for any other purpose. Patrons are not sent marketing or any other unsolicited email.

## What I use it for

Running the service. That's it.

I send the following emails, all transactional

-   Email confirmation when you sign up
-   Password reset requests
-   Subscription and billing confirmations
-   Account deletion notifications

I do not send marketing emails.

## Where your data is stored

Different parts of the service are hosted across the UK and EU

-   Database hosted by Neon (AWS EU-West-2, London)
-   Application hosted by Fly.io (London)
-   Emails sent via Postmark (EU endpoint)

Stripe processes payment data on their own infrastructure under their own privacy policy.

## Who else has access to your data

| Service | What they receive | Why |
| --- | --- | --- |
| Stripe | Payment and billing data | Processes subscriptions |
| Postmark | Email addresses | Delivers transactional emails |
| Neon | All account data | Hosts the database |
| Fly.io | All account data | Hosts the application |
| Inngest | Event metadata | Handles background email delivery |
| Sentry | Error details, IP addresses, browser information | Monitors errors and performance |

None of these services use your data for their own marketing purposes.

## AI and machine learning

I don't use your data, or your patrons' data, to train artificial intelligence or machine-learning models.

I also don't share your data with any AI provider for training purposes. None of the sub-processors above receives your data for AI training, and the contracts I have with them prohibit it.

Your Book Nest doesn't currently use generative AI inside the product. If I add features that do (for example, suggesting a category for a new book from its title), I'll explain in advance which AI provider is involved, what data is sent to it, and how to opt out. I'll never send your data to a third-party AI provider without telling you first.

## Cookies

Your Book Nest sets the following cookies

| Name | Purpose | Duration |
| --- | --- | --- |
| token | Keeps you signed in to your account | 7 days |
| menu\_sidebar | Remembers whether the sidebar menu is open or closed | 7 days |
| current\_party | Remembers whether you are viewing the demo as a librarian or patron | 365 days |
| demo\_industry | Remembers which demo library you viewed so the demo stays consistent as you browse | 90 days |
| library\_currency | Remembers your preferred currency | 365 days |
| billing\_currency | Remembers your preferred currency for the subscription price | 365 days |

During checkout, Stripe may set its own cookies (such as \_\_stripe\_mid and \_\_stripe\_sid) for fraud prevention. I don't control these - see [Stripe's cookie policy](https://stripe.com/gb/cookie-settings) for details.

## Browser local storage

I store a small amount of functional data in your browser's local storage to keep the demo working between page loads

| Name | Purpose |
| --- | --- |
| demo-access-token | Remembers your demo session so your changes are saved |

This data stays in your browser and is not sent to any third party.

## Analytics

I use Umami, a self-hosted analytics tool that does not use cookies and does not collect personal data. It records anonymous page views, device types, browsers, and country-level location. No individual visitors are identified or tracked.

I do not use tracking pixels, advertising scripts, or any analytics service that profiles users.

## Error monitoring

I use Sentry to detect and fix errors. When something goes wrong, Sentry receives technical details about the error including your IP address and browser information.

## How long I keep your data

Your data is kept for as long as your account is active. If you cancel your subscription, your data remains available in read-only mode.

## Deleting your data

You can delete your library content (items, copies, loans, and patrons) from the Danger zone on the [settings](/settings) page in the app.

To delete your account entirely, email me at [danedwardscreative@gmail.com](mailto:danedwardscreative@gmail.com). Deletion is scheduled straight away, but your data is kept in a recoverable state for a short period first in case of mistakes or fraudulent account takeovers. During that window, email me and I can restore your account. After it, all data is permanently removed.

## Your rights

Under UK GDPR, you have the right to

-   Access the personal data I hold about you
-   Correct inaccurate data
-   Request deletion of your data
-   Export your data in a portable format
-   Object to processing of your data

To exercise any of these rights, email me at [danedwardscreative@gmail.com](mailto:danedwardscreative@gmail.com).

## Changes to this policy

If I make changes, I'll update the date at the top of this page. For significant changes, I'll notify you by email.

## Contact

Dan Edwards

[danedwardscreative@gmail.com](mailto:danedwardscreative@gmail.com)