Privacy

The short version

We hold your email address, your delivery address, what you like to read, any bookshelf photographs you upload, and the list of books read from them. We use it to choose and post books to you. We do not sell it, and we do not use it for advertising.

Bookshelf photographs

These are pictures of the inside of your home, and they are treated that way. They are stored privately, never at a public or guessable address, and are only ever shown to you and to NinthYard.

Each photograph is sent once to Anthropic's Claude API, which reads the book spines and returns a list of titles. Anthropic processes it to provide that result. We keep the resulting list of titles against your account.

You can delete any photograph from your account at any time, and it is removed from our storage. Deleting a photograph does not delete the titles read from it, because those are your shelf list — remove those separately if you want them gone.

What we hold, and why

Email address

To sign you in and to tell you when a book is posted. Required to have an account.

Delivery address

To post books to you.

Reading preferences

To choose books you will want.

Shelf photos and book list

To learn your taste and to avoid sending duplicates.

Delivery history

To avoid sending the same book twice, and so you can see what you have had.

We process this to perform our contract with you, and because we have a legitimate interest in running the service well.

Payments

Payments are handled by Stripe. Your card details go to Stripe, never to us — we hold only a Stripe customer reference and your subscription status. Stripe's own privacy policy governs what they do with it.

Who else sees it

• Stripe — payments and billing.
• Resend — sending your sign-in links and delivery emails.
• Anthropic — reading book spines from shelf photographs.
• DigitalOcean — hosting, in a UK or EU data centre.

Nobody else. We do not sell or share your data for marketing.

How long we keep it

While your account exists, and for as long afterwards as we need for tax and accounting records. Ask us to delete your account and we will remove your personal data, keeping only what the law requires us to retain.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email [email protected]. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

One cookie, which keeps you signed in. There is no analytics, no tracking, and no advertising cookie, so there is nothing to consent to.