Privacy

Who

MeMori book is a book catalogue, free and invite-only for now. Your data is handled by Federico Mori: for any question write to privacy@memoribook.it.

What we keep

• Account: email, name, username if you choose one, language and preferences. Never your password: only an encrypted fingerprint.
• Your books, reading, quotes, notes and ratings. Photos you upload are seen only by you, and lose their metadata (place, date, phone).
• What you choose to share: reviews, public profile (with your username) and shared statistics (numbers only).
• What you write to us in “Write to us” (encrypted, read only by whoever runs MeMori) and your votes for upcoming features (only totals are shown).
• For security: open sessions and the devices you sign in from (“Edge · Windows” and dates). No IP address, no location.

Why

To let you use MeMori (GDPR art. 6.1.b) and to protect accounts (art. 6.1.f). What you share, only if you turn it on (art. 6.1.a): turn it off in Account.

No ads, no profiling, no visit statistics. Data is never sold or handed over.

Where

On a server Aruba, Italia (Unione europea). Emails are sent through Aruba (Italia).

Email, name, notes, quotes and photos are encrypted in the database too.

To find books and authors the server asks public catalogues (SBN, Open Library, Wikidata, Wikipedia, Google Books, bookshops and publishers) with titles, authors and ISBNs: never data about you. Your browser talks only to MeMori.

When you choose a password, the server asks Have I Been Pwned whether it has been stolen, sending only the first 5 characters of its fingerprint: the password never leaves.

How long

• Everything, as long as you keep your account.
• Account never confirmed: 7 days.
• Session: 14 days, then sign in again.
• IP address: in memory only, one hour at most, to stop people trying too many passwords.
• Backups: encrypted, 60 days at most. A deleted account disappears from them too.

Cookies

Two, technical and needed to sign in:

• __Host-bookland_refresh: your session, 14 days.
• __Host-bookland_device: recognises your device to warn you about new sign-ins, 400 days.

The browser also remembers theme, language and how you like to see pages. No third-party cookies, no tracking.

Your rights

• A copy of everything: Account → Download all my data.
• Delete everything: Account → Delete account. Immediately, photos included.
• Correct, restrict, object or ask anything else: privacy@memoribook.it.
• Complaints: Italian data protection authority (Garante), garanteprivacy.it.