Libreture provides online e-book, digital comic & magazine storage to readers. Readers can keep their collection private or choose to display information about their collection publicly. Anyone can view publicly visible collections by visiting the Libreture website, and search engines can index them. No books are available to download to anyone other than the owner that uploaded them.
For more information about the service Libreture provides, visit the About page.
Libreture is a Data Controller, registered with the Information Commissioner's Office.
What Personal Data does Libreture collect and process?
Libreture only stores and processes the personal data you provide when creating an account.
This data includes:
- username - does not need to be your real name
- e-mail address
If you choose to pay for additional storage, you will need to provide payment details, which may include your real name, to the payment provider.The payment details, collected separately by our payment provider, include:
- name on the payment card
- e-mail address
- postal address (sometimes)
- payment card number, expiration date, and 3-digit code
If you choose to subscribe to the Libreture E-Mail Newsletter, you will be providing your information directly to our newsletter provider. You will be asked for your:
- e-mail address
Libreture uses MailerLite to manage our e-mail marketing subscriber list and to send e-mails to subscribers. MailerLite is a third-party provider, which may process your data using industry standard technologies to help Libreture monitor and improve our newsletter.
You can unsubscribe from the newsletter at any time, using the unsubscribe link in any of the newsletter e-mails or by e-mailing email@example.com. At which point your e-mail address will be deleted.
Why does Libreture collect this Personal Data?
The personal details Libreture collects are the minimum I believe are necessary to run the service effectively.
Libreture collects this information under the Lawful Basis of a Contract.
The following diagram shows what is and is not covered by the various lawful bases.
The lawful basis of Contract means you have the following rights when creating a Libreture account:
- Right to erasure
- You can cancel your Libreture account at any time. All your data and books will be deleted on your next renewal date.
- Right to Portability
- You can already download the books you have uploaded to your library. New features will soon allow you to download your entire library in one go, along with all the data you have additionally applied to it through Libreture, such as Reading Status, Recommendations, Favourites, etc.
While not included in your rights under Contract, Libreture addresses the following in its processes:
- Right to Object
- Whilst you cannot object to Libreture's right to record the minimum required information to provide customers with the service, you of course have the right not to create a Libreture account in the first place. You also have the right to close your account at any time - all your Personal Data will be deleted immediately (or on your next renewal date, if you are paygin for extra storage), which ends your relationship with Libreture.
The specific items of Personal Data are collected for these reasons:
- An unique address for your library, and a way to refer to you through any necessary internal communications. Not used for logging-in or authentication. Only made public (on Libreture.com) if you choose to make your library public.
- E-Mail Address
- An unique identifier, so you can log-in. It also allows Libreture to send you password reminders, book upload reports, and any other internal or transactional messages related to your account or the service. Never made public.
- An accepted method of ensuring you are who you say you are when logging-in to your account. Encrypted using salted PBKDF2 with 30,000 iterations. Never made public.
Who has access to your data?
Three separate parties have various levels of access to your personal data.
- Libreture - Kevin Beynon
- As the owner of Libreture, I can view the username and e-mail address you add to Libreture when creating an account.
If you choose to expand your storage with a paid subscription, I can view the e-mail address you give the payment provider, along with the type of payment card, the last four digits, and its expiry date.
- IT Development Company - Tridan IT Ltd.
- The Libreture website is developed by Tridan IT Ltd. 13-15 St. Georges Street, Norwich, Norfolk, NR3 1AB
Tridan technically have access to personal data through their role in ensuring the correct functioning of the website and development of new features.
- Web Hosting Company - Bytemark Ltd.
- Since the Libreture website and database is hosted on a server managed by Bytemark Ltd., they technically have access to the system and any personal data, but have no reason without my express permission. Bytemark are ISO 27001 Certified. The server is hosted in York, UK.
- Payment Provider - Stripe
- Stripe collects credit/debit card information, along with name and e-mail address, and sometimes a postal address. This information is only requested for customers who pay for additional storage, and solely for processing these payments.
Private by default, Public by choice.
Your personal data, including your e-mail address and password, are never shared with anyone.
All personal data in an user's account is only stored for as long as that account exists. That is, until account deletion is triggered by either the user or by Libreture.
Libreture uses SSL throughout, meaning your entire interaction with Libreture is delivered over HTTPS.
You may experience a warning about the certificate when using Libreture through an older browser, such as on an old e-reader device. This is due to older browsers not recognising new SSL Certification Authorities, such as Let's Encrypt, which Libreture uses. Many old e-readers that are otherwise in perfect working order are no longer updated by their respective manufacturers. The security certificate is still valid, and if you can, please select whichever option allows you to continue.
Your book collection, or library, is private by default. If you choose to make your library public, your username and information about your book collection will be visible to the general public and will likely be indexed by search engines.
Your private library and any books you have specifically made private will never be intentionally displayed to other users or shared with third parties.
Libreture does not serve any external third-party content (scripts, cookies, or images), other than the payment provider (Stripe) tools that are required on the Edit Account page.
This site collects completely anonymous statistical information about visitors.
No personally identifiable information is recorded in the analytics data.
Recorded analytics data includes which pages and how long visitors stay on each one.
All analytics data is stored in the EU.
Libreture DOES NOT use any third-party social media share buttons.
If you are still concerned, you may wish to use privacy protection tools, such as the Disconnect or uBlock Origin plug-ins. These can usually be found in your web browser's Plug-in or Add-on listings.
You may want to keep your entire library private or just keep some books hidden for all sorts of reasons.
Your actual book files are never shared, only information about your books, and only if you choose to make your library public.
When you first join Libreture, your Library is already private. You can change this at any time by visiting your library and selecting Make my library public. You can make it private again just as easily, by selecting Make my library private.
To exclude individual books from displaying publicly, regardless of your library's overall privacy setting, select Make Private on an individual book page.
Private libraries and private books are only visible to you - never to other users or the public, including search engines.
Do not feel obliged to make your library public.
Libreture is funded by users' storage subscriptions, so it makes no difference to Libreture's revenue whether you keep your library private or not. Libreture's business model is specifically designed not to make use of selling data or advertising space.
Suggestions or concerns
I think the privacy options in Libreture work in the majority of cases, but let me know if you have any suggestions or concerns.
Owner and registered Data Controller of Libreture