Privacy

Version paid-2 · Published 2026-10-24T06:29:30Z

1. Operator and contact

Book Corner at EnchantedTBR.com is operated by TBR Treats, based in Texas, United States. Contact EnchantedTBRTreats@gmail.com for account assistance, privacy questions or requests to exercise your rights. This policy describes Book Corner; external websites, including the separate TikTok shop, have their own practices.

2. Information we process

We process information you provide and information generated when you use the service:

- Account information: name, email address, password hash, verification and recovery records, saved time zone, preferences, membership dates and renewal preference. We do not keep a readable account password.
- Reading information: books and editions, covers, series, genres, tropes, spice and star ratings, page or listening positions, dates, notes, reading/listening sessions, daily progress, challenges, rewards and reviews.
- Community information: club ownership and membership, polls and choices, votes, optional reading profiles, follows, follow requests, blocks and reports.
- Service information: connected-session browser descriptions, sign-in and certain administrative security events, quota and rate-limit records, annual-goal celebration dismissals, policy versions and acceptance timestamps, and information you send to support.
- Hosting information: the hosting and email systems may process IP addresses, request metadata, user-agent information, delivery records and diagnostic logs needed to provide and protect the service.

Avoid entering sensitive personal information or information about other people in free-text fields when it is unnecessary for your reading records. Reading choices and notes can themselves reveal personal interests; consider what you choose to share.

Series wishlists store the missing books you choose to track, including series name, title, author, optional volume number, cover link and timestamps. They remain private to your account and do not publish Social reading activity. They are included in reading-data backup exports and deleted with the account, subject to the existing recovery-copy schedule. A matching purchased book saved to Book Log clears the corresponding wishlist entry.

3. Why we use information

We use information to create and verify accounts; provide reading, club and Social features; maintain membership entitlements and usage allowances; deliver account verification and password recovery; answer support and rights requests; enforce access and privacy settings; investigate abuse; maintain backups; and record policy agreement.

We do not sell personal information or use Book Corner records for targeted advertising. The current application does not include an advertising or analytics SDK and does not make automated decisions about employment, lending, housing or other similarly significant eligibility matters. Reading suggestions and reward calculations are organizational tools.

Where an applicable law requires a legal basis, the proposed bases are performance of the service you request, legitimate interests in maintaining security and operating a reliable service, compliance with legal obligations, and consent where the particular optional use requires it. Optional sharing controls do not authorize unrelated uses. Accepting the Terms or acknowledging this policy is not a substitute for separate consent where the law requires that consent.

4. What other members can see

Your email address, private notes, loan details and private reading records are not shared through Social. Social sharing is initially off. If you enable it, other members may discover your reading profile and display name under the available discovery controls, including shared club-member lists.

A public reading profile permits registered members to see its shared books and follow immediately. A private profile requires approval before another member can see its shared books. Shared book information is limited to title, author, available cover and reading status; Social does not disclose your ratings, notes, reviews or account contact details. “Public” in these profile controls means available within the registered-member service, not a promise that information is published to the open web.

Changing a public profile to private preserves existing approved followers. Disabling sharing removes incoming follows and requests. Blocking removes follows and requests in both directions and restricts Social visibility. Unblocking does not restore the connections. People who previously saw information may have retained it; privacy changes cannot recall their screenshots or copies.

Community reviews are private until you submit them and the site administrator approves publication to registered members. Editing a published review returns it for review; withdrawal removes publication immediately. Club members can see membership information through the relevant club features. Poll screens display aggregate results, not a list of individual voters, although account-linked votes are stored to enforce eligibility and the one-vote rule. Authorized administrators can access operational records needed to operate, support or moderate the service.

Club-read completion is optional. Checking the featured club book's completion box shares your account name with fellow current club members and the site administrator. Uncheck it to remove your completion. This is separate from your private Book Log progress. Completion records are linked to the poll and account and are removed when either is deleted; full recovery copies follow the backup retention schedule.

Book Club Picks collects the suggested book title, author, submitting account, local submission date and review status. Suggestions go privately to the Book Corner site administrator; other members cannot browse them. This feature is available only in site-managed clubs; Premium member-owned clubs do not collect suggestions. The administrator chooses which suggestions to include in a poll. These records remain linked to the submitting account and club and are removed when either is deleted; recovery copies follow the backup retention schedule.

Buddy Reads — private collaboration
Premium members may invite a chosen mutually following Premium member to read a book together. The recipient must accept and choose their own matching Book Log entry before progress is shared. We store the two member identifiers, linked book identifiers, title/author, optional goal dates, invitation state and timestamps. Participants can see the selected book's reading status, available cover and page or audiobook position; private notes, ratings and reading-session history are excluded. There is no Buddy Read chat or messaging. Blocking, unfollowing, removing a follower or disabling sharing ends open Buddy Reads. Premium expiry pauses shared progress; either participant can close the read. Invitations expire after 30 days, but expiry/closure does not automatically erase the collaboration record. Account deletion removes related collaborations. Reading-record downloads/imports do not copy other members' collaborations or grant sharing permission; encrypted full-site backups include this table under the existing backup retention.

Public website pages explain the available features and provide the navigation guide without requiring sign-in. Search engines may index those public descriptions, Terms and Privacy Policy. They do not provide anonymous access to member profiles, private books, reading sessions, account settings or payment records.

5. Providers, external content and disclosures

InMotion Hosting hosts the site server in the United States. Transactional account email uses the hosting mail server. Your message to our support address is handled through a regular Gmail account. Google describes its own processing and deletion practices in its Privacy Policy (https://policies.google.com/privacy) and data-retention information (https://policies.google.com/technologies/retention). Deleting a support message does not mean every provider copy is immediately erased. Providers process information needed to supply those services. Provider operations and subprocessors may involve other countries; the U.S. server location does not mean all processing stays in the United States.

When you request book research, the server sends title/author lookup information to Open Library. That request does not include your account identity, private notes or complete reading history. Metadata may be cached. Loading an external HTTPS cover image contacts the image host, which can receive your IP address and normal request information. Uploaded covers are served from Book Corner. Different cover hosts may have different practices.

The TBR Treats Shop link opens the separate TikTok profile. Book Corner does not embed TikTok checkout or a TikTok tracking widget. TikTok processes visits and purchases under its own terms and privacy information.

When paid checkout is available and you choose to purchase, Square processes payment information on its hosted page. For automatic renewal, Square stores your authorized payment method. Book Corner does not receive or store full card numbers or security codes. Square processes information under its own privacy and payment-service practices.

Book Corner records the account-linked checkout and subscription references, payment and invoice identifiers, membership price, tax, total, refunds reported by Square, successful-payment and paid-through dates, renewal state, and the exact purchase disclosures and policy version you accepted. We use these limited records to verify payment, provide Premium, manage cancellation and price continuity, respond to disputes and meet applicable financial obligations. They are not shared through Social, clubs or Buddy Reads.

Financial references and purchase-authorization evidence may need to remain after account deletion for applicable tax, accounting, refund or payment-dispute obligations. Deleting the account removes its local account link from retained payment records; it does not erase records Square is required or entitled to retain. Contact support with questions or requests. These records are separate from the 90-day application security-log schedule.

We may disclose information when reasonably necessary to comply with applicable law or a valid legal process, investigate fraud or abuse, protect rights and security, or respond to your authorized request. We will evaluate such requests rather than treating every request as automatically valid. We do not authorize providers to use private reading records for an unrelated purpose through this policy.

6. Cookies and account security

An essential session cookie supports sign-in and request protection. If you choose persistent sign-in, a secure HTTP-only cookie can restore sign-in for up to 30 days using revocable, rotating tokens. It does not contain a readable password. Browser session storage remembers expanded or collapsed Book Log sections and series cards for the current tab and sign-in session; signing out clears this layout, and closing the tab ends its session storage. Connected sessions can be revoked in Settings. Password resets revoke existing sign-in authorization.

The application uses HTTPS, account access controls, hashed passwords and private encrypted recovery backups. No security system guarantees prevention of every incident. Report suspected unauthorized access through our support email and do not send your password. Browser password-manager storage is controlled separately by you and your browser.

7. Retention and deletion

There is no single retention period for all Book Corner information:

- Active reading and account records remain until you delete them or the account. Premium expiration does not delete saved history.
- Application security audit events for login, account restore and integration-setting changes have a 90-day retention period. This does not apply to all moderation records or host-controlled logs.
- Application-generated safety snapshots made before applying a member-imported backup expire after 30 days through maintenance. These are separate from active records and downloaded exports.
- Encrypted on-host recovery archives follow a 30-day retention schedule. Expiry is processed after a new archive passes verification; a failed job can delay removal. Off-host storage is not currently configured.
- Verification links expire after 24 hours and password-reset links after one hour. Remembered sign-in tokens expire after up to 30 days. Maintenance removes expired token records.
- Short-window rate-limit events are removed after 24 hours. Monthly Next Read allowance records currently have no scheduled age limit.
- Connected-session records persist until revocation or account deletion. Account-linked daily Social usage counts, annual-goal celebration dismissal records and policy acceptance evidence remain with the account. Published policy texts can remain without the deleted account's acceptance link.
- Resolved Social reports are automatically removed 180 days after resolution. Pending reports remain while the relevant accounts exist. Invalid or inconsistent dates are preserved for review. Review moderation and poll-deletion audit records have no universal scheduled expiry.
- We review resolved routine support conversations monthly for removal once they have been closed for at least one calendar year. Open issues, privacy-rights requests, copyright complaints, security/eligibility investigations, disputes and payment/shop records are handled separately. Provider deletion processes may retain copies for additional time.
- The operator reports that this InMotion account has no provider-managed backups or retained server/access logs. This does not disable Book Corner’s own application logs or encrypted on-server backups. Email, provider security/account records and support correspondence are separate and are not represented as covered by the application’s 30-day or 90-day schedules.

Account deletion removes live personal account and reading records and linked Social records. Uploaded covers and member restore files are queued for removal, with retries if removal fails. Owned clubs close; individual vote links are removed while anonymous poll totals may remain, with closed-club history available only to the site administrator under the applicable closure rules. Audit actor links are removed rather than treating every historical event as a live account record.

Deletion does not immediately rewrite retained recovery archives or erase copies already downloaded by you or another authorized recipient. Before restoring an older archive into active service, later verified deletion requests must be reconciled. Applicable legal obligations may require limited retention; we will explain a relevant exception when responding to a request.

Account access review
We may record an eligibility, security or Terms review category, restriction/restoration timestamps and administrative audit events when reviewing account access. The site owner can temporarily restrict access without deleting reading records or changing membership dates. This revokes current and remembered sessions, disables Social sharing, hides community reviews, ends open Buddy Reads and pauses owned clubs. Restoration requires a fresh sign-in; previous sessions, Social sharing and Buddy Reads do not automatically resume. Previously approved reviews become visible again after restoration. These operational review records are separate from the 90-day diagnostic security-event policy and are retained with the account unless a justified applicable requirement calls for another treatment. The account-linked current restriction record is removed on account deletion. Contact support to request review of a restriction. Reading-backup imports cannot change account access restrictions.

8. Your choices and privacy requests

You can edit account preferences and reading records, control Social sharing, revoke sessions, withdraw review publication, download a reading-data backup and delete your account using the available controls. Settings also offers a password-confirmed account-information download containing your profile, reading records, policy acknowledgments and selected Social, club, session-description and Buddy Read records. It is separate from the importable reading-data backup. These downloads exclude credentials, other members’ private records, internal investigations and mailbox/provider records; neither is a complete response to every possible privacy request.

Email our support address to request access to other personal information, correction, deletion, portability or another right available under applicable law. Depending on the law that applies, you may also have rights to object to or restrict processing, withdraw consent for a consent-based use, opt out of specified processing, or appeal a decision about a rights request. We do not currently sell data or use it for targeted advertising.

We will verify requests using information reasonably needed to protect the account and respond within applicable legal deadlines. Do not send a password. We may ask you to use your registered email or an authenticated account procedure. If we cannot fulfill a request, we will explain the reason and any applicable appeal route. You can request reconsideration by emailing the same contact with “Privacy appeal” in the subject. These processes do not limit a right to complain to an applicable regulator or pursue another lawful remedy.

9. International users and adults-only service

Book Corner is available without a country restriction and is operated from Texas with a U.S.-hosted server. Using it from another country can involve international transfers. Where applicable law requires safeguards, representatives or additional notices, those requirements must be satisfied; accepting these Terms or this policy does not itself establish a valid transfer safeguard or waive your local rights.

The service is intended for people at least 18 who have reached legal majority where they live. It is not intended for children. Contact us if you believe an ineligible minor has an account. We will investigate and take appropriate steps to restrict access and remove information, subject to applicable legal requirements.

10. Changes and policy records

The page displays the published policy version and date. Settings shows recorded Terms acceptance and Privacy acknowledgment and links to the corresponding text. A page view alone is not acceptance.

For a material change, we will provide an appropriate notice through the site or an account communication, with advance notice or fresh consent where required. We will not describe a new data practice as authorized solely because you acknowledged an earlier policy.