Privacy policy

Who is responsible

This policy covers The Quiet Bookshelf website and its private book-content management application. The Quiet Bookshelf is an independent project run by an individual, not a registered company.

For privacy questions or requests to access or delete personal data, contact: thequietbookshelf1@gmail.com.

Browsing the website

You can read our pages without creating an account. The application has no public signup, checkout, newsletter signup or visitor comment form. We do not receive your payment details when you follow a book link to Amazon. Hosting infrastructure may process your IP address, browser information, requested pages and request times to deliver and protect the website.

Cookies and local preferences

The public website does not include advertising trackers or visitor analytics scripts. Language is selected through the page address. The private administration area uses necessary authentication cookies; connecting Pinterest also uses a temporary security cookie to verify the connection request. Blocking these cookies can prevent sign-in or account connection.

Administration and messages

For the private administrator account, the application processes name, email address, a password hash, session information and security records. It also stores uploaded book materials, generated content and publishing records. If you email us, we process your email address and the information in your message to respond. Please do not send sensitive personal information that is unnecessary for your request.

Pinterest integration

Connecting Pinterest is an optional action available to the administrator. After authorization, the application can receive the connected username, authorization tokens and board information. It uses these to verify the connection, list boards and publish content that the administrator approves and schedules. Publishing sends Pinterest the selected image, title, description, destination link and board identifier. Tokens are encrypted on the server and are not displayed publicly. Visitors do not need to connect a Pinterest account to read this website.

Disconnecting Pinterest and deleting data

The administrator can disconnect Pinterest in the application's platform settings, after resolving pending publishing jobs, or revoke access in Pinterest settings. Disconnecting in the application removes stored authorization tokens; it does not automatically delete existing Pins or all publishing history. To request deletion of retained personal data, email the privacy contact above. Pins already published must also be managed on Pinterest. We may verify your identity before fulfilling a request.

Why we process data

Where the GDPR applies, our legitimate interests in running a secure website and administering our own publishing activities support necessary technical, security and account processing. We process correspondence to respond to your request; steps you request before a contract or a legal obligation may apply where relevant. Pinterest authorization grants API permissions and can be revoked; it does not authorize unrelated uses of your data. If a future feature requires consent, we will request it separately before that processing.

Service providers and external links

Hosting, storage and email providers process information needed to deliver their services. Pinterest receives information when the administrator connects or publishes; Amazon processes visits and purchases on its own website under its own policy. If the administrator enables an external AI writing provider, book descriptions and content instructions are sent to that provider to generate drafts. Pinterest tokens are not part of those requests. We do not sell personal data. The website cozypages.ro is hosted on a Host-Age VPS in Romania. Our public contact address uses Gmail, provided by Google. Pinterest, Google and any enabled external AI provider may process data outside the European Economic Area. Where applicable, transfers require an adequacy decision or appropriate safeguards, such as standard contractual clauses. You can contact us for information about the safeguards applicable to your data.

How long data is kept

We retain data only as needed for its purpose, security, resolving disputes or legal obligations. Administrator sessions are configured for one day and the Pinterest connection request expires after ten minutes. Pinterest credentials remain until disconnection or removal; content and publishing history remain until managed or deleted by the administrator. Technical logs are retained according to the server’s rotation settings for security and fault diagnosis. Backup copies, where maintained, are kept only for recovery and expire under the applicable backup cycle. Contact us for details or to request deletion; an applicable legal retention duty may limit deletion.

Your rights

Where applicable, you may request access, correction, deletion, restriction or portability of your personal data and object to processing based on legitimate interests. You may withdraw consent where consent is the basis, without affecting earlier lawful processing. We normally respond within one month; if a permitted extension is necessary, we will explain it. You can complain to your local data protection authority, including ANSPDCP in Romania. We do not use visitor data for automated decisions with legal or similarly significant effects.

Children and policy changes

This website does not offer accounts to children or intentionally collect their personal information. If you believe a child has provided personal information, please contact us. We will update this page when our data practices change and revise the date above.