Privacy policy

Read without building a public profile.

Public BookSummary.org browsing does not require an account. We collect the minimum information needed to operate search, prevent abuse, receive private book requests, and understand whether the service is working.

Last updated August 20, 2026

Information we process

  • Book requests: the selected book metadata, identifiers, reference URL, request time, and request status. Public request forms do not ask for your name or email address.
  • Technical records: ordinary server and security logs, which can include IP address, browser information, requested path, timestamps, and error details.
  • Local aggregate analytics: daily counters for a small set of public route categories. Dynamic book, author, and genre URLs are grouped by route shape. These counters do not contain an IP address, cookie, user identifier, or individual browsing history, and respect browser Do Not Track and Global Privacy Control signals.
  • Messages: information you choose to send when you contact us, including your email address and message contents.
  • Administrator session: a signed, HTTP-only browser cookie used only to verify access to private administration pages.

Why we use it

We process this information to deliver pages, de-duplicate private requests, protect the service, diagnose errors, respond to messages, enforce our terms, and meet legal obligations. We do not sell personal information or create public profiles from requests.

CAPTCHA and external book lookup

The request flow may use Cloudflare Turnstile to distinguish people from automated abuse. Cloudflare receives technical data needed to provide that check under its own privacy terms. Searches for missing books may be sent to bibliographic providers such as Open Library or Google Books; the query should not contain personal information.

Cookies and advertising

BookSummary.org's advertising integration is disabled until configured and approved. If advertising is enabled, ads appear only on published book pages. Where required—including in the EEA, UK, and Switzerland—Google Privacy & Messaging asks for consent before advertising or analytics storage is granted. Personalized ads are permitted only after the relevant advertising purposes are granted.

Optional Google Analytics is also disabled by default. If enabled, it uses advanced Google Consent Mode v2. In the EEA, UK, and Switzerland, advertising and analytics storage, advertising user data, and ad personalization start denied. Before a choice, or after a rejection, Google tags may send limited measurements without cookies; granting a purpose allows the corresponding storage or use. Outside the regions covered by Google's European regulations message, those signals use a granted regional default and that message is not expected to appear. Analytics is limited to the home, catalogue, published book, genre, and author discovery pages. It is not loaded on search, book requests, contact or legal pages, sign-in, or private administration. Recorded page locations exclude query strings and fragments.

When European regulations apply, the footer provides a Privacy and cookie settings control for reopening Google's choices. Essential security or sign-in technologies may still operate where necessary. Your browser may also let you block or delete cookies.

Retention, security, and your choices

We keep records only as long as reasonably needed for the purposes above, then delete or de-identify them unless law requires longer retention. No online service can promise absolute security, but we limit administrative access and avoid collecting unnecessary data.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information. Use the contact page to make a privacy request. We may need to verify your identity before acting on it.