Privacy policy

Author page views

Author pages count views by page, day and channel, without cookies, IP addresses or visitor identifiers. Aggregated counts are retained for 90 days. The 30-day rate compares confirmed subscriptions since measurement began with views of the same page and channel; it does not represent unique visitors or sales.

Who is responsible

For author accounts, this site's audience statistics and the feedback received, the data controller is the publisher named in the legal notice.

For readers who leave their e-mail on an author's page, the author decides how that address is used: the author is the controller and BookLinks acts on their behalf, as a processor.

What we collect

• Author account: your e-mail address, author name and subdomain, then whatever you enter (books, links, affiliate IDs, capture pages and, if you set one up, access to your e-mailing tool). Basis: performing the service you asked for.
• Sign-in: a single-use link, valid for 15 minutes, sent by e-mail. A 30-day session is kept in a cookie.
• Clicks on authors' links: the destination store, the visitor's country (derived from the request) the site they came from and the channel indicated in the link when known. No IP address and no visitor identifier is recorded. Automated visits (bots, link previews) are not counted. Basis: authors' legitimate interest in measuring their links.
• Reader subscriptions: email address, optional first name, book and sign-up page, channel from the link when known, consent text and date, and email confirmation date. Basis: reader consent. The channel is passed in the address and form, without a new tracking cookie or visitor identifier.
• Feedback: the message, its type, the page it was sent from, the language and, if you are signed in or fill it in, your e-mail address so we can reply.
• Abuse protection: a fingerprint of your IP address (never the address itself) is used to limit the number of requests, and disappears within 24 hours.

Audience measurement

The platform's pages (not authors' pages) use Watchtower Ping, a cookie-free audience measurement tool. It keeps no IP address and no browser identifier: only a salted daily fingerprint is used, which cannot follow you from one day to the next. Raw visits are kept for 60 days, on servers located in Paris.

Cookies

BookLinks only uses cookies that are necessary for the service, with no advertising or tracking, so it does not ask for consent:

• bf_session: your sign-in session, 30 days.
• bl_locale: the language you chose, 1 year.
• bf_lm: briefly remembers (24 hours) that a reader has just confirmed their subscription, to show the thank-you page.

Retention

• Expired sign-in links and sessions, rate-limit records: deleted automatically (within 24 hours at most for the latter).
• Unconfirmed reader subscriptions: deleted after 30 days.
• Account, links, click statistics and confirmed subscriptions: kept until the account is deleted, which you can request at any time from your settings (everything is then deleted, without delay).
• Feedback: kept as long as it is useful to improve the service; you can ask for it to be deleted.

Recipients and providers

Your data is neither sold nor passed on for advertising. It is processed by technical providers: Vercel (application hosting), Supabase (database), Resend (sending e-mails), Watchtower Ping (audience measurement) and, if the author enabled it, the author's own e-mailing tool, to which confirmed subscriptions are forwarded.

Some of these providers are established outside the European Union; transfers rely on the safeguards provided by the GDPR (standard contractual clauses or the EU–US data privacy framework).

Your rights

From your settings, you can download your data and delete your account yourself. You can also ask for access to your data, its correction or erasure, restriction of or objection to processing, and portability where it applies. To leave a mailing list, use the link in every e-mail you receive.

For any question or request: marty.faivre@gmail.com.

If you believe your rights are not respected, you can complain to the CNIL (cnil.fr), the French data protection authority.