Legal

Privacy Policy

Last update: May 2026

Your privacy matters. MyBookList is a personal portfolio project — we collect only what is strictly necessary to provide the service, we never sell your data, and you can request full deletion of your account at any time.

Section 1

What We Collect

We collect only the minimum information required to provide the service:

Name
Your display name, provided by your OAuth provider (Google or GitHub).
Email
Your email address, used solely to identify your account.
Profile photo
Your avatar URL from your OAuth provider, displayed in the app interface.
READING DATA
Books, sessions, goals, and progress that you manually add to the app.

We do not collect browsing data, device fingerprints, or any information beyond what you explicitly provide.

Section 2

How We Use It

The information we collect is used exclusively to:

  • Authenticate you and maintain your session

  • Display your reading library, sessions, and statistics

  • Associate your reading data with your account

  • Allow you to manage and delete your own data

We do not use your data for advertising, profiling, or any purpose beyond providing the service described above.

Section 3

Data Storage

Your data is stored in a PostgreSQL database hosted on Neon. Data is stored securely and is only accessible through authenticated requests made by your account.

We do not store your OAuth credentials or passwords — authentication is handled entirely by Google and GitHub through the OAuth 2.0 protocol.

Section 4

Sharing of Data

We do not sell, rent, or share your personal data with third parties. Period.

The only external services that handle any part of your data are:

  • Google/GitHub

    — for authentication only, via OAuth 2.0

  • Neon

    — for database hosting

These services have their own privacy policies and are used solely to enable the core functionality of MyBookList.

Section 5

OAuth Providers

MyBookList uses Google and GitHub for sign-in via OAuth 2.0. When you authenticate, we receive a limited set of profile information (name, email, and avatar) from your chosen provider.

We request only the minimum scopes necessary. We do not access your Google Drive, Gmail, GitHub repositories, or any other data beyond basic profile information.

You can revoke MyBookList's access at any time through your Google or GitHub account settings.

Section 6

Your Rights

You have full control over your data. At any time, you may:

  • Access all data associated with your account

  • Edit or delete any reading entry, session, or goal

  • Request complete deletion of your account and all associated data

  • Revoke OAuth access through your provider's settings

To request account deletion, contact us at cardoso.matheusbs@gmail.comand we will process your request within 7 days.

Section 7

Data Retention

We retain your data for as long as your account is active. If you request account deletion, all your personal data and reading records will be permanently removed from our systems.

We do not keep backups of deleted accounts beyond a 7-day window after deletion, after which the data is irrecoverable.

Section 8

Contact

If you have any questions or concerns about this Privacy Policy or how your data is handled, please reach out at cardoso.matheusbs@gmail.com. We will respond as soon as possible.