This policy explains what information Without Spoilers (“we”, “the site”) collects, why we collect it, and the choices you have. We’ve tried to keep it short and honest. The site is operated by an individual based in the United States.
The short version
- You can use almost the entire site without an account. If you do, your reading progress is stored only in your own browser.
- If you create an account, we store your email and your reading progress so it can sync across your devices.
- We do not sell your data. We do not run third-party advertising trackers.
What we collect
Reading progress. The series you’re reading and how far you’ve read. Without an account this lives only in your browser’s local storage. With an account it’s also saved to our database so it follows you between devices.
Account information. If you sign up, we collect your email address and an encrypted password (handled by our authentication provider, Supabase). If you set a display name or claim a public username, we store those too.
Basic technical data. Like most websites, our hosting and infrastructure providers automatically process standard request data (IP address, browser type, pages requested) to serve the site and keep it secure. We also use Vercel Analytics, which records privacy-friendly, aggregated usage such as page views and referrers, with no cross-site tracking cookies and no advertising profiles.
What we do NOT collect
- We don’t currently collect payment information.
- We don’t use advertising or cross-site tracking cookies.
How we use it
- To remember where you are in each series and filter the site to that point.
- To sync your progress across devices when you’re signed in.
- To operate, secure, and improve the site.
Cookies & local storage
We use browser local storage to remember your reading progress and preferences. If you sign in, our authentication provider sets cookies needed to keep you logged in. We do not use these for advertising. Clearing your browser storage will remove locally-saved progress.
Who we share it with
We share data only with the infrastructure providers that run the site on our behalf:
- Supabase: database and authentication (stores your account and synced progress).
- Vercel: hosting, serving the site.
- Open Library / Internet Archive: book cover images are loaded by ISBN, and your browser requests these directly.
We do not sell or rent your personal information to anyone.
Data retention
We keep your account data for as long as your account exists. If you delete your account, we delete your associated personal data within 30 days, except where we’re required to retain it by law.
Your rights
Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these, contact us at philhoeck@gmail.com. You can also delete your locally-stored progress at any time by clearing your browser storage.
Children
The site is not directed to children under 13, and we do not knowingly collect their personal data.
Changes
We may update this policy. When we do, we’ll change the “last updated” date above and, for material changes, make a reasonable effort to notify signed-in users.
Contact
Questions about privacy? Reach us at philhoeck@gmail.com.