Privacy Policy

1. Who We Are

MyReadingStats is operated by APEX Studio, based in the Netherlands. If you have questions about this Privacy Policy or about how your data is handled, you can contact us at:

Email: support@myreadingstats.com

Address: APEX Studio, Friese Streek 9, 9873RG Gerkesklooster, The Netherlands

2. Personal Data We Collect

When you use MyReadingStats, we collect the following information:

• Email address — used to create and manage your account and to send account-related communications.
• Reading data — books you track, reading sessions (dates and times), personal notes, ratings, and reviews you add to the service.
• Technical usage data — such as IP address, browser type, device type, and pages visited, used to maintain and improve the service.
• Discord user ID — if you connect your Discord account to share reading updates, we store your Discord user ID to link your MyReadingStats account to your Discord account.
• Social login data (planned) — if you choose to use a third-party login provider (such as Google or Apple) in a future version of the app, we may receive your name and email address from that provider. This Privacy Policy will be updated before that feature is introduced.

3. Legal Basis for Processing

We process personal data only when we have a lawful basis under the General Data Protection Regulation (GDPR). The legal bases we rely on are:

• Contractual necessity (Art. 6(1)(b)) — to create and maintain your user account and deliver the MyReadingStats service.
• Legitimate interests (Art. 6(1)(f)) — to maintain the security, stability, and improvement of the service. These interests do not override your rights and freedoms.
• Consent (Art. 6(1)(a)) — for optional features such as connecting your Discord account. Where we rely on consent, you may withdraw it at any time by disconnecting the integration from your account settings.
• Legal obligations (Art. 6(1)(c)) — when we are required to retain or disclose data to comply with applicable laws.

4. How We Use Personal Data

We use personal data to:

• Provide and maintain the MyReadingStats service
• Store and display your reading data, notes, ratings, and reviews
• Manage user accounts
• Send account-related emails (such as password reset and account notifications)
• Send reading updates to your connected Discord account (if you have enabled the Discord integration)
• Ensure system security and prevent abuse
• Respond to user support requests
• Improve the functionality and reliability of the service using aggregated or anonymised analytics data

5. Analytics

MyReadingStats collects limited usage statistics in order to understand how the service is used and to improve its functionality. Analytics are performed internally using our application platform and do not rely on third-party tracking services.

Where possible, analytics data is aggregated or anonymised and is not used to identify individual users.

6. Cookies

MyReadingStats uses only cookies that are strictly necessary for the operation of the website. These cookies are used for essential functions such as maintaining user login sessions and ensuring the secure operation of the service.

No advertising cookies or third-party tracking cookies are used.

7. Data Sharing and Processors

We do not sell, rent, or trade personal data. We work with the following trusted service providers (data processors) who process personal data on our behalf under binding Data Processing Agreements:

• Oracle Cloud Infrastructure (Frankfurt, Germany) — our hosting and application platform. Data is hosted within the European Union.
• Mailgun (Sinch) — transactional email delivery (for example, account-related emails). Mailgun processes email addresses as necessary to deliver these messages.
• Payment processors (future) — if paid features are introduced, a third-party payment processor will handle payment transactions. This policy will be updated before any paid tier is launched.

All processors are contractually required to handle personal data only as instructed and in accordance with applicable data protection law.

When you enable the Discord integration, reading updates are sent to your Discord account via Discord's API. In this context, Discord (Discord Inc.) acts as an independent data controller for any data posted to their platform. We encourage you to review Discord's Privacy Policy to understand how they handle data received through their platform.

8. Data Retention

Personal data is retained only for as long as necessary to provide the MyReadingStats service. Account information is retained while the account remains active.

If an account is deleted, associated personal data will normally be removed within 30 days, unless retention is required to comply with a legal obligation.

9. International Data Transfers

Your personal data is hosted on servers located in the European Union (Frankfurt, Germany) via Oracle Cloud Infrastructure.

Our transactional email provider, Mailgun (Sinch), is headquartered in the United States. When you enable the Discord integration, your Discord user ID and reading updates are transmitted to Discord Inc., also based in the United States. Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data receives an equivalent level of protection.

10. Minimum Age

MyReadingStats is intended for users aged 16 and older. We do not knowingly collect personal data from children under the age of 16.

If you believe that a child under 16 has registered an account without appropriate parental consent, please contact us at support@myreadingstats.com and we will promptly delete the account and associated data.

11. Your Rights

Under the GDPR and applicable data protection law, you have the following rights regarding your personal data:

• Right of access (Art. 15) — You can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — You can request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17) — You can request deletion of your personal data, subject to any legal retention obligations.
• Right to restriction of processing (Art. 18) — You can ask us to restrict how we process your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability (Art. 20) — You can request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21) — You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at support@myreadingstats.com. We will respond within 30 days.

12. Complaints

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is:

Autoriteit Persoonsgegevens — www.autoriteitpersoonsgegevens.nl

You may also lodge a complaint with the supervisory authority in the EU member state where you reside.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the service, legal requirements, or our data practices. When we make material changes, we will update the "Last updated" date at the top of this page.

For significant changes, we will notify registered users by email or through a notice within the application. We encourage you to review this Privacy Policy periodically.

14. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: support@myreadingstats.com

Address: APEX Studio, Friese Streek 9, 9873RG Gerkesklooster, The Netherlands