Privacy

Yonderbook finds the books on your reading list that your public library has. It needs very little about you to do that, and it keeps less than it could. This page says exactly what, for how long, and who else is involved.

You don't need an account

You can connect Goodreads or upload a Goodreads CSV export and check library availability without signing up. In that case nothing about you is written to our database. Your shelves, any uploaded library and your results are held in our server's memory for about 15 minutes and then discarded.

What we store if you create an account

• Your email address and a hashed password (Argon2; we can't read it). If you only sign in with emailed links, there is no password.
• Short-lived sign-in records: links for verifying your email, resetting a password or signing in, failed sign-in counts used to lock out password guessing, and your active sessions.
• Your Goodreads connection, if you make one: your Goodreads user ID and the access token Goodreads issues, so we can read your shelves.
• A library you import from a Goodreads CSV export: each book's title, author, ISBN, publication year, your rating, the date you added it and its shelves. We keep it so you don't have to upload it again.
• Which books you've sent to BookMooch, if you use that feature, so we don't send the same ones twice.
• Availability alerts, if you turn them on: the libraries you picked, the copies we're watching for you (title, author, format, library and OverDrive's id for it), and the title, author and ISBN of books on your list that your libraries didn't have yet, so we can check each morning and look for new additions each week. Turning alerts off deletes all of it.

What we only hold while you use it

These stay in memory on our server, or briefly in a temporary file, for about 30 minutes (15 without an account), and are never written to the database:

• shelves fetched from Goodreads, and availability results
• the libraries you picked and the zip code you searched
• your BookMooch username and password, only while an import to BookMooch is running

"Use my location" sends your coordinates to our server, which matches them to the nearest zip code in its own table. They aren't stored or sent anywhere else.

Cookies

We set one cookie, an encrypted session cookie, which the site needs to work. Our analytics use no cookies. The chat widget (below) sets its own.

Services we rely on

• Render hosts the site and the database. Their request logs include IP addresses for a limited time.
• Fathom Analytics counts page views and a few actions (like checking availability) in aggregate, without cookies or personal data.
• Sentry receives error reports. They can include your account number, but are configured not to include personal details.
• Resend sends our emails (verification, password reset, sign-in links, and availability alerts if you turn them on), so it receives your email address and, for alerts, the books in the email.
• Tawk.to runs the chat widget on every page. It sets cookies, and receives whatever you write in a chat.
• OverDrive receives the titles and authors we search for, the zip code you enter to find libraries, and, for alerts, the ids of the copies we're watching.
• Goodreads, if you connect it: you sign in on their site, and we request your shelves from them.
• BookMooch, if you use it: we send them your BookMooch sign-in and the books to add.
• Open Library receives ISBNs when we look up other editions for BookMooch.
• Google Fonts, jsDelivr and Unsplash serve fonts, a chart library and the homepage image, so your browser contacts them directly, which shares your IP address with them.

We don't sell your data, show ads, or use affiliate links.

Deleting your data

• Everything: sign in and go to Account, then Delete my account. That removes your account and everything listed above, immediately.
• Just Goodreads: disconnect it from Connections.
• Just alerts: turn them off from Account or the link in any alert email.
• Just an imported library: remove it from the import page.

Error reports and logs already sent to the services above expire on their own schedules.

Children

Yonderbook isn't directed at children under 13, and we don't knowingly collect their information.

Changes and questions

If this changes, we'll update this page and the date at the top. For questions or requests, use the chat button in the corner of any page.