Privacy Policy

We use your information to:

• Provide and improve the service (your reading lists, votes, ratings)
• Personalize your book recommendations based on your preferences
• Send essential emails (password resets, magic links, account notifications)
• Maintain security and prevent abuse

We do not sell your data to third parties, share it with advertisers, or use it for any purpose other than making Ooh La Lit work better for you.

We use a few trusted services to run Ooh La Lit. Here's what they do and what data they may process:

• Supabase — Stores your account data and powers our database. Your data is encrypted at rest and in transit.
• Vercel — Hosts the website. Standard web request logs (IP addresses, browser info) are collected as part of hosting.
• Resend — Sends transactional emails (magic links, password resets). Your email address is shared only to deliver these messages.
• Upstash — Handles rate limiting to prevent abuse. No personal data is stored. Only request counts tied to IP or account are tracked briefly.
• ISBNdb— Provides book metadata (titles, authors, descriptions, covers). This is not user data. It's information about books.
• Google — Optional sign-in. If you choose to sign in with Google, Google handles authentication and shares basic profile info (your name and email) with us.
• AI language models — We use a third-party AI provider to help classify and tag romance books. It only receives publicly available book information (titles, publisher and retailer descriptions), never full book text or your personal data.
• Amazon & Bookshop.org — Affiliate links for buying books. When you click a buy link, standard referral information is shared with that retailer. See the Affiliate Disclosure below.
• PostHog — Product analytics. It helps us see which pages and features get used. It sets no cookies and stores nothing on your device. It never records your screen. We never send it your email, your real name, or anything you type. Logged-in activity is labeled with a random account ID and your public display name — the same name anyone can see on your profile.
• Sentry — Error monitoring. When something breaks, Sentry receives a technical report so we can fix it. Reports are configured to exclude your IP address, cookies, and personal data.

We keep cookies to a minimum:

• Essential cookies only— If you're logged in, we use a session cookie to keep you authenticated. That's it.
• Cookie-free analytics — We use PostHog to count visits and see which features get used. It sets no cookies and stores nothing on your device. It never records your screen and never follows you across the web.
• First-party activity records — We keep a record of reading activity, book views, and buy-link clicks on our own servers. This powers features like trending books and better recommendations. It stays in our database and is never shared. Search terms are not stored.
• No cross-site tracking— We don't use Google Analytics, Facebook Pixel, or any tracking scripts that follow you across the web.
• No advertising cookies— We don't serve ads. We don't sell or share profiles about you.

We keep your data for as long as you have an account. If you delete your account:

• Your personal data (email, display name) is deleted
• Your reading lists and saved books are deleted
• Your tag votes may be anonymized and retained to maintain tag accuracy
• Any books or reading history you imported are removed or anonymized along with the rest of your data

Book viewing logs are automatically deleted after 180 days. Reading activity and buy-link clicks are kept while you have an account, since they power your recommendations.

You can request account deletion at any time by contacting us.

We take reasonable administrative, technical, and organizational measures to protect your information. Data is transmitted over encrypted connections, and we rely on reputable infrastructure providers for hosting and storage. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

If you believe you've found a security issue, please contact us at admin@oohlalit.com.

You have the right to:

• Access — See what data we have about you
• Correct — Update your information in your profile settings
• Delete — Request deletion of your account and data
• Export — Request a copy of your data (coming soon)

To exercise these rights, contact us at the email below.

Ooh La Lit is intended for users who are 18 years of age or older. Our platform includes descriptions of romance books that may contain mature or explicit content. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

We participate in affiliate programs with Amazon and Bookshop.org. When you buy a book through a link on our site, we may earn a small commission at no extra cost to you. As an Amazon Associate I earn from qualifying purchases.

Our recommendations are based on tags and community votes, not on which retailer pays us more.

We'll be honest about the Amazon tradeoff. Amazon is not everyone's favorite, but it has the broadest catalog and the most reliable affiliate data. Once affiliate purchases reach enough volume, that revenue goes toward better book data and faster access to new releases, which improves the catalog for everyone. We also link to Bookshop.org, which supports independent bookstores, so you can choose where your purchase goes.

We may update this policy from time to time. If we make significant changes, we'll update the "Last updated" date at the top and, if you have an account, notify you via email.

Questions or concerns about this policy? Reach out to us at:

admin@oohlalit.com