Privacy Policy

Last updated: May 2025

Who we are

Boring College is operated by Dariush Abbasi. Our servers are hosted in Europe. You can reach us at [email protected].

What we collect and why

Account information

When you create an account we store your email address, display name, and (if you use OAuth) your provider user ID. This is required to provide the service.

Reading progress

We store which chapters you've read and which books are on your shelf. This is required to sync your progress across devices.

Payment data

Payments are processed by Polar.sh. We store a record of your purchase (order ID, amount, book) but never your card details.

Analytics

With your consent, we use Google Analytics to understand how the site is used. This may set cookies and send anonymised data (pages visited, browser type, country) to Google. You can withdraw consent at any time using the cookie settings link in the footer.

Legal basis (GDPR)

We process your data under the following legal bases:

  • Contract — account data and reading progress are necessary to provide the service you signed up for.
  • Consent — analytics cookies are only set after you explicitly agree.
  • Legitimate interest — we may process minimal data for security and fraud prevention.

Your rights

Under GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your account and associated data
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent for analytics at any time

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

Data retention

We retain your account data for as long as your account is active. If you request deletion, we remove your personal data within 30 days, except where we're required to keep records for legal or financial purposes.

Third-party services

  • Polar.sh — payment processing
  • Google Analytics — usage analytics (consent required)
  • OAuth providers (Google, GitHub, LinkedIn, X) — authentication only; we do not receive your passwords

Changes to this policy

If we make material changes we'll update the date at the top of this page. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this policy? Email [email protected].