privacy

last changed 18 October 2026

vivliothiki is in a private test, open only to people who have been invited. This page says what it keeps about you, who can see it, and what you can ask for.

• No advertisingand nothing about you is sold or handed on.
• No trackingno analytics, no tracking cookies, no third-party scripts.
• Your books are yoursseen only by the people you share a library with.

who is responsible

vivliothiki is run by Social Capital ΙΚΕ (Greece), which is responsible for your data — the “controller”, in the words of the GDPR. Write to thodoris@georgakopoulos.org about anything on this page.

what is kept

• Your email address, and your name if you give one.
• Your library: its books and everything you add to them — notes, lists, shelves, cover pictures — and your own reading marks (what you have read, and what you want to read).
• When you were invited and when you joined. For each device you sign in on, the kind of browser it reports, and a date that keeps it signed in for a year after you last used it — moved at most once a month, and never shown to anyone. When you use the app is not recorded beyond that.
• Feedback you choose to send: your note, a screenshot if you add one, and — shown to you in the box before you send it — the app’s version, your kind of device and browser, and the screen you were on.

Nothing else: not where you are, not your contacts, and no pictures from your camera — the camera reads barcodes on your device, and no image leaves it.

what it is used for

To let you in and to keep your library. Your address receives sign-in codes; an invitation, if somebody adds you to a library; and a note, if anything on this page or about the test changes in a way that matters. Nothing else — no newsletters, no marketing.

The legal basis is that this is the service you asked for (GDPR article 6(1)(b)). The sign-in records are also kept to protect the accounts (article 6(1)(f)).

who sees what

• Your library is seen by you, and by the people you share it with. On a library somebody has shared with you, its other members see its books and notes, your name or address on its list of members, and your reading marks on its books.
• The person who runs vivliothiki sees, in the app, a list of everybody with an account: address and name, when they were invited and joined, and whether they keep a library. Never when they use the app, what is on their shelves, or how much.
• Feedback is read by the person who runs vivliothiki, and by nobody else; it also reaches his email, through Resend. If you tick the box that allows it, your first name may appear in the update notes beside a change you suggested.
• The database itself can be read by that same person, as the database of any website can be read by whoever runs it. We do not look at people’s libraries. We open the database only to put a fault right, to do something you have asked for, or when the law requires it.

who else handles it

• Cloudflare hosts the app, the database and the stored covers, and keeps short-lived technical logs of requests, which include internet addresses.
• Resend sends the emails, and so sees your address and the message.

Both are American companies, working for us under data-processing terms that include the EU’s standard safeguards for data leaving the EU.

When a book is looked up, its ISBN or title is sent to public book catalogues. Sent from our server, it carries nothing about you. Some lookups, and many cover pictures, are fetched by your own device directly from Google Books and Open Library, which then see your device’s internet address — as any website you visit does.

Cover pictures are kept on a store shared by everybody on vivliothiki, and anyone who has a cover’s exact address can see that picture. It is a picture of a book’s cover; it says nothing about who owns the book.

on your device

The app keeps a copy of your library and your sign-in on your phone or computer, so that it works without a signal and does not ask you to sign in every time, and a few settings (view, size, light or dark). That is storage the app needs in order to work, not cookies that follow you, which is why there is no cookie banner. Even the typefaces come from vivliothiki itself, not from anybody else. Erase this device, under Settings › Your data, removes it.

how long

• Your account and library: until you ask for them to be deleted, or the test ends. If it ends, you will be told in good time to export your books.
• Signed in: a year on each device, unless you sign out sooner. A sign-in code: ten minutes.
• Feedback: until you take it back (Settings › Feedback), or your account is deleted.
• After a deletion, a copy stays in the database’s own history for up to 30 days, and is then gone. Copies on your own devices stay until you erase them.

what you can ask for

To see what is kept about you, to have it corrected, to have it deleted, or to have it in a file — Export, under Settings › Your data, already gives you your library as JSON or CSV. You can also object to any use of it, or ask for it to be limited. Write to thodoris@georgakopoulos.org; you will have an answer within a month at the latest.

If you think we have got something wrong, you can complain to the Hellenic Data Protection Authority, dpa.gr.

if something goes wrong

If your data is ever exposed, we will tell you, and the Authority, as the law requires.