# Privacy Policy *Last updated: May 26, 2026* ## Who we are Bookr is operated by ****, an autónomo registered in Spain *(data controller under GDPR)*. You can reach us at [](mailto:). ## What we collect and why ### Account information When you register, we collect your email address. You may also register a passkey (a secure on-device credential). **Lawful basis:** performance of a contract — we need this to provide the service. ### Reading data We store your reading progress, bookmarks, highlights, and notes so you can pick up where you left off. **Lawful basis:** performance of a contract. ### Usage analytics We collect anonymised visit and event data to understand how the app is used. IP addresses are masked before storage and never shared with third parties. All analytics data is stored on our own servers. **Lawful basis:** legitimate interests (improving the service). ### Error logs We log application errors to diagnose and fix bugs. Logs are configured to exclude personally identifiable information. **Lawful basis:** legitimate interests (security and reliability). ### Marketing emails If you opt in at signup, we may send you product updates and tips. You can unsubscribe at any time via the link in any email. **Lawful basis:** consent. ## Who we share data with We use a small number of third-party processors to operate the service — for example, payment processing, error tracking, and transactional email. We do not sell your data. You can see the current list on our [data processors page](/privacy/processors). ## International transfers Your data is processed within the European Union. If we transfer data outside the EU at any time, we will do so using appropriate safeguards (Standard Contractual Clauses or equivalent). ## How long we keep your data - Account and reading data: until you delete your account - Anonymised analytics: up to 2 years - Error logs: 90 days - Marketing consent records: until you request deletion ## Your rights Under GDPR you have the right to access, correct, delete, or export your personal data. You also have the right to object to processing or withdraw consent at any time. To exercise any of these rights, email us at [](mailto:). You can also delete your account directly from your [settings page](/settings). If you are unhappy with how we handle your data, you have the right to lodge a complaint with the [AEPD](https://www.aepd.es) (Spain's data protection authority). ## Cookies We use only essential cookies: a session cookie to keep you logged in, and a remember-me cookie if you choose to stay signed in. No advertising or tracking cookies are used. ## Changes to this policy We will notify registered users by email of any material changes to this policy.