eLibs collects the minimum information needed to operate the service:

• Email address — used only for account verification, password reset, and service emails via Supabase Auth. We do not send marketing emails.
• Story content, ratings, and play history — the fill-in-the-blank stories you author, the ratings you give, and the plays you complete are stored so the service can show your profile and statistics.
• Phone number (optional) — you may add phone numbers for friends in the Friends tab. These are stored solely to let you send share links via SMS. They are never used for marketing or shared with third parties.
• IP address — logged by our hosting provider (Vercel) for spam prevention and abuse detection. Logs are retained per Vercel's standard policy (typically 30 days).
• Profile information — username, avatar emoji, banner, and bio. All optional except username, which is auto-generated and changeable.

Your data is used exclusively to operate eLibs:

• Authenticating your account and maintaining your session.
• Displaying your profile, stories, and activity to other users (subject to your visibility settings).
• Computing aggregate statistics (play counts, ratings).
• Sending share-link notifications you initiate.

We do not sell your data. We do not share your data with third parties for advertising or marketing purposes.

We use the following sub-processors to run the service. Each processor handles data only as necessary to provide their service:

• Supabase — database, authentication, and storage. Data is stored on servers in the region you selected at account creation (currently US East). See supabase.com/privacy.
• Vercel — hosting, edge network, and serverless functions. See vercel.com/legal/privacy-policy.

All data associated with your account (profile, stories, plays, ratings, contacts, session history) is retained as long as your account exists. When you delete your account via Settings → Account → Delete Account (three-step confirmation), your profile and authored public stories are hidden during the 30-day recovery period. If you do not restore the account, personal data is permanently deleted and published stories may remain available under the Deleted Account profile. Stories other users have saved are not retroactively deleted from their saved libraries.

You have the right to:

• Access — request a copy of the data we hold about you.
• Deletion — delete your account and all associated data at any time from Settings → Account.
• Export — request an export of your stories and play history.

To exercise any of these rights, email privacy@elibs.app. We will respond within 30 days.

eLibs uses a single essential cookie: the Supabase authentication session cookie. This cookie is required for you to stay signed in; the service cannot function without it. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

eLibs is recommended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at privacy@elibs.app and we will promptly delete the account.