Privacy Policy

Page 101 is the controller of your personal data under Chile’s Law 21.719 and, where applicable, the EU General Data Protection Regulation (GDPR).

Account data: email, username, password (hashed) — to create and maintain your account.

Profile data: display name, avatar, bio — to show your profile to other users.

Reading activity: logged books, ratings, read dates, tags — the core product: your diary and stats.

Public content: reviews, comments, lists — shown to other users according to your settings.

Private notes: diary notes marked private — visible only to you; never shown to others.

Social data: who you follow, who follows you, blocks — to power the social graph and honor blocks.

Imported data: reading history from Goodreads or another source (if you use that feature) — to populate your diary with existing history.

Technical data: IP address, device type, pages visited — security, abuse prevention, and product analytics.

We process your data under the following bases, consistent with Law 21.719 and GDPR:

Performance of a contract: to provide the service you accepted when creating an account (logging reads, showing your profile, etc.).

Consent: for optional features such as email notifications or importing external data — you may withdraw consent at any time.

Legitimate interest: for Platform security, spam/abuse prevention, and product improvements based on aggregated analytics.

We do not sell your personal data to third parties. We share limited information with:

Infrastructure providers: Supabase (database and authentication), Vercel (hosting).

Communications providers: Resend (transactional email).

Catalog APIs: Open Library, Google Books (for covers and book metadata — they do not receive your personal data; we only query their public catalogs).

Authorities: when there is a valid legal requirement.

Diary notes marked private are protected with database-level access controls (Row Level Security). No other user — including people who follow you or view your profile — can access that content. Internal administrative access is limited to what is strictly necessary for technical support or a legal requirement.

Under Law 21.719 and GDPR, you have the right to:

Access: request a copy of the data we hold about you (you can self-export from Settings → Data → Export).

Rectification: correct inaccurate data.

Erasure: delete your account and your data from Settings → Data or /eliminar-cuenta (immediate).

Objection: object to certain processing (for example marketing communications).

Portability: receive your data in a structured format (CSV) to take it to another service.

For other questions about your data, email page101club@gmail.com. We respond within 7 business days.

We keep your data while your account is active. When you delete your account, we erase your personal data immediately, except information we must retain by legal obligation (for example security records related to fraud).

Page 101 is not directed at children under 16. You must be at least 16 years old to create an account. Buying, selling, or making payments (when available) requires you to be at least 18. If we detect an account below the applicable minimum age, we will delete it or restrict access to commerce features.

Some of our providers (Supabase, Vercel, Resend) may process data outside Chile. When that happens, we ensure an adequate level of protection under applicable law.

We apply technical measures such as encryption in transit, database-level access controls, and rate limiting to help prevent unauthorized access. If a security breach affects your data, we will notify you without undue delay, as required by Law 21.719.

We use local storage (session cookies) strictly necessary to keep you signed in. We will update this section if we later add third-party analytics cookies that require a consent banner.

We will notify you of material changes via a notice on the Platform or by email.

For any question about your data: page101club@gmail.com

If you believe we have not adequately resolved your request, you may lodge a complaint with Chile’s Personal Data Protection Agency (once fully operational) or, if you reside in the EU, with your local data protection authority.