Privacy

From every visitor

• Anonymous counts — which pages and styles are viewed, copied and saved, so the Library can show what’s popular. A repeat visit on the same day is recognised by a code we scramble anew every day, so we can never follow you from one day to the next. Nothing is stored on your device.
• Errors — when a page breaks, the error and the page’s address go to Sentry so we can fix it. Your screen is never recorded.
• Your country, read from your connection — only to decide whether to ask you about Google Analytics. It isn’t stored.

If you make an account

• Your email — to send your log-in codes and to reply to you.
• Your name, picture and About — these are public, on your profile. Your collections are public, for members only, or private, as you set each one.
• The four “Help us know you” answers, if you give them — only Midlibrary sees them.
• If you log in with Discord, Patreon or Google: the name, email and picture that account shares with us. If you support us on Patreon, your tier.
• If you buy a membership: your plan and its dates. Stripe takes the payment — we never see your card.
• What you view, copy and save — kept on your account, so your library remembers and popularity counts are real.

If you write to us or report a bug

• Your message, the page’s address and — only if you add it — a screenshot of the page. Your email, if you give it.

Google Analytics tells us how people find Midlibrary and whether they come back on another day — something our anonymous counts can’t see. It runs on Cloudflare’s servers, so your browser never loads a Google script, but it does set one cookie to recognise your next visit.

In Europe (the EU, the EEA, the UK and Switzerland) it runs only if you say yes. Anywhere else it runs unless you turn it off. You can change your answer here at any time, and saying no changes nothing else about the site.

• Your log-in — one cookie, only once you log in. The site can’t keep you logged in without it.
• Your analytics answer — so we don’t ask again.
• Google Analytics’ cookie — only while it’s allowed (above).

Your browser also remembers small things, like closing the welcome bar. That stays on your device.

• Anonymous counts and error reports: to keep Midlibrary working and improve it (a legitimate interest).
• Your account, collections, membership and emails: to give you the account and the membership you asked for.
• Google Analytics in Europe and the “Help us know you” answers: your consent, which you can take back at any time.

• Cloudflare — runs the site and its database, keeps the anonymous counts, checks that a form comes from a person (Turnstile), and runs Google Analytics on its servers.
• Bunny.net — stores and delivers the pictures, profile pictures included.
• Resend — sends our emails: log-in codes and notes about your account.
• Stripe — takes membership payments and keeps the billing record.
• Google — Google Analytics, only as above, and Google log-in if you use it.
• Sentry — error reports.
• Discord, Patreon — only if you log in with them, or support us on Patreon.

Some of them work outside your country, under the safeguards the law requires. None of them may use your data for anything but this.

• Anonymous counts: only as totals.
• Error reports: up to 90 days.
• Google Analytics: 2 months for anything tied to a visit, the shortest it allows.
• Your account: until you delete it. Deleting removes your profile, pictures, collections and answers at once, and our backups forget them within 30 days. We keep one thing: the account’s inner number and the day, so a copy from the old site can never bring it back.
• Payments: as long as the law requires Stripe and us to keep billing records.
• Messages and bug reports: until they’re handled, then up to a year.

You can see, fix and delete what we hold. Most of it is in your profile — edit anything there, or delete your account. For a copy of everything, or anything else, write to librarian@midlibrary.io; we answer within a month. If you think we’ve got it wrong, you can also complain to your country’s data protection authority.

Midlibrary is for adults: you need to be 18 or older to make an account, as the Terms of Use say. If you think a child has given us their details, write to us and we’ll delete them.

Every change gets a new date at the top of this page. A change that matters gets an email to members before it takes effect.

Midlibrary is run by JB Nina, Inc., 131 Continental Drive, Suite 305, Newark, Delaware 19713, USA. Questions about this page: librarian@midlibrary.io.