Privacy notice
How Million Word Club uses and protects account, reading and optional analytics data.
- Million Word Club is operated by Tom and Gray. Contact [email protected] for privacy questions, corrections, a copy of your information or account deletion. The Solo pilot is for invited adult readers. Managed Family access has separate adult and reader controls; children should not submit the public access form.
- We store the information you provide to run your account: your sign-in email and reader name; saved books, reading progress, dates, ratings, wishlist, private notes and preferences. Older managed accounts may also have school, grade and country fields. Access requests contain an adult contact name, email, general location, audience and any optional message.
- Your private library and notes are restricted to your account. Family data follows its adult/reader permissions. Public book pages describe books, not the people reading them. The optional community setting can contribute anonymous aggregate reader and rating totals; it does not publish your name or notes.
- Supabase provides authentication and database services. Our hosting and network providers serve the application and process technical request information needed for delivery and security. Book searches use Google Books and Open Library. Public book metadata may be sent to OpenAI for catalogue summaries or source research. We do not send your private notes, ratings, reading history or contact details to those AI tasks.
- PostHog product analytics is optional and off until you allow it in this browser. It measures permitted page visits and actions, and may link signed-in actions to your account ID. We do not enable session recordings or send book titles, search text, notes, names or emails. You can change your choice in your profile or the footer. Authentication and preference storage are used to make the app work even when analytics is off.
- We use service providers that may process information in different countries. We do not sell personal data or use your private reading notes for advertising. A share card is created only when you choose to share or download it; the card contains the achievement, not your private library.
- Account data is kept while the account is active. You can export your library in CSV or JSON from My books. Ask us to delete your account from your sign-in email; we verify ownership and aim to complete requests within 30 days. We explain any information that must be retained for a specific legal or security reason. Backup copies are isolated from normal product use and expire through the backup retention process; a restored backup must have completed deletion requests reapplied before use.
- Unsuccessful or inactive access requests are reviewed for removal after 12 months unless there is an ongoing conversation or another stated reason to retain them. We keep access to operational records limited and review the retention of security, catalogue and support records. Contact us if you want an access request removed sooner.
- You may ask to access or correct information, object to a use, withdraw optional analytics consent, or request deletion. The available rights can depend on where you live. We may need to verify your identity before acting. We will update this notice when the product or its data practices change.