TalehollowRankingsSearch
Log in

Privacy Policy

Last updated: August 11, 2026

1. Who we are

Talehollow is operated by Joao Paulo Effting, an individual based in Sweden, who is the data controller for the personal data described below. You can reach us at talehollowapp@gmail.com for any privacy question or request.

2. What we collect

Account data. When you sign up: your email address, a password (stored hashed by our authentication provider, Supabase — we never see it in plain text), and the username/display name you choose. Optionally: a bio, an avatar image, and your site/content language preferences.

Content you create. Books, chapters, comments, scrapbook posts, likes, follows, and reports you submit — all stored in our database. Anything you publish (books, chapters, scrapbook posts, comments) is, by nature, public and visible to other visitors.

Usage & analytics data.If you accept the cookie banner shown on your first visit, we use PostHog to understand how the Service is used — page views, general device/browser information, and an approximate location derived from your IP address. We don't use this to build advertising profiles, and we don't sell it. Nothing is sent to PostHog unless you accept — you can change your choice at any time via "Cookie preferences" in the footer.

Cookies. A session cookie that keeps you logged in (necessary for the Service to function), an anonymized anon_idcookie used to prevent the same visitor from inflating view counts (kept for up to a year), a cookie remembering your analytics consent choice, and — only if you've accepted that choice — cookies set by PostHog for analytics.

CAPTCHA verification. We use Cloudflare Turnstile to tell human visitors apart from bots on sign-up, login, and password reset. Turnstile processes some technical signals about your browser /device to do this — see Cloudflare's privacy policy.

Reading progress."Continue reading" and per-chapter read status are stored only in your own browser's local storage — this never leaves your device or reaches our servers, and doesn't sync across devices.

3. How we use it

4. Legal basis (GDPR)

We process account and content data because it's necessary to provide the Service you've signed up for (performance of a contract). We process anti-spam and security data (like the anon_idcookie) under legitimate interest. Analytics data is processed only with your consent — nothing is sent to PostHog until you accept the cookie banner, and you can withdraw that consent at any time via "Cookie preferences" in the footer, which stops future tracking immediately.

5. Who we share data with

We don't sell your data. We share it with the infrastructure providers that run the Service, each acting as a data processor on our behalf:

6. International data transfers

Some of the providers above (PostHog, in particular) process data outside the EEA. Where that happens, it's done under that provider's own data protection safeguards (such as Standard Contractual Clauses).

7. Your rights

If GDPR applies to you, you have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent where processing is based on it. Account deletion and data export are both self-service — "Your data" and "Danger zone" in Settings — no need to email us for either. For anything else (correcting inaccurate data, objecting to processing), email talehollowapp@gmail.com. You also have the right to lodge a complaint with your local data protection authority (in Sweden, the Integritetsskyddsmyndigheten (IMY)).

8. Data retention

We keep your data for as long as your account is active. If you request deletion, we'll delete or anonymize your personal data within a reasonable time, except where we're required to keep something longer (e.g. to resolve a dispute or comply with a legal obligation).

9. Children's privacy

Talehollow isn't directed at children under 13, and we don't knowingly collect data from anyone under that age. If you believe a child has provided us with personal data, contact us and we'll delete it.

10. Security

We take reasonable measures to protect your data (e.g. encrypted connections, hashed passwords), but no method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time; we'll update the "Last updated" date above when we do.

12. Contact

talehollowapp@gmail.com — see also our Terms of Service.

We'd like to use analytics cookies to understand how Talehollow is used. No tracking happens unless you accept — see our Privacy Policy.