Privacy Policy

Last updated: March 2026

1. Who We Are

BookOrb.com is operated by Interlink Digital Group Limited, registered at Lancaster House, Amy Johnson Way, Blackpool, FY4 2RP, United Kingdom. Company registration number available on request.

2. Information We Collect

Account information: When you register, we collect your username, email address, and a hashed version of your password (using Argon2id - we never store your password in plain text).

Reading data: Books you add to shelves, ratings you give, and reviews you write.

Usage data: Pages visited, search queries, and interaction patterns - collected to improve recommendations and platform performance.

Technical data: IP address, browser type, operating system, and device information - collected automatically via server logs.

3. How We Use Your Information

  • To provide and maintain your BookOrb account
  • To personalise book recommendations and search results
  • To display your public profile and reading activity (if you choose to make it public)
  • To improve our platform, fix bugs, and develop new features
  • To communicate with you about your account and platform updates
  • To prevent fraud, abuse, and security threats

4. Data Sharing

We do not sell your personal data to third parties. We may share data with:

  • Service providers: Hosting, email delivery, and analytics services that help us operate BookOrb
  • Legal requirements: When required by law, court order, or governmental request

5. Cookies

We use a single essential session cookie (bookorb_session) to maintain your login state. This cookie is HttpOnly, Secure, and SameSite=Lax. We do not use third-party tracking cookies.

6. Data Security

We protect your data with:

  • Argon2id password hashing (memory-hard, GPU-resistant)
  • HTTPS/TLS encryption for all connections
  • CSRF protection on all forms
  • Content Security Policy headers
  • Brute-force login protection with rate limiting

7. Your Rights (GDPR)

If you are in the UK or EEA, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing of your data
  • Port your data to another service
  • Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@bookorb.com.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

9. Children

BookOrb is not directed at children under 13. We do not knowingly collect personal data from children under 13.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email.

11. Contact

For privacy enquiries: privacy@bookorb.com

Interlink Digital Group Limited
Lancaster House, Amy Johnson Way
Blackpool, FY4 2RP, United Kingdom