This notice explains the information Tomeful needs to run a reading diary, and the choices you keep around it. Last updated 11 August 2026.
What we keep
When you make an account, we keep your email address, username, sign-in method, and the information you choose for your profile, such as a bio or avatar. Passwords are stored as a hash, not as readable text.
We also keep the reading information you add or create here: your reader card, shelf and reading status, reviews, lists, club activity, and the settings that control what other readers can see.
Why we use it
We use account and reading information to provide the diary, keep your session working, show the public parts of your profile when you allow them, and make suggestions from the signals you choose to share with Tomeful.
Our services also receive the technical information needed to deliver and secure a web service, such as request and device information. We do not sell personal information.
Sharing and visibility
Your email address, password hash, and sign-in identifiers are not shown on public profiles. Your privacy setting controls whether your profile and reading activity are visible to other readers. Public reviews, lists, clubs, and profile details can be seen by anyone while they are public.
If you sign in with Google, Google provides the account details needed to create or connect your Tomeful account. We do not publish information from that sign-in provider on your profile unless you choose it.
Retention and access
We keep account and reading information while your account is active and as long as needed to provide your reading history. If you ask us to delete it, we remove it from the active service; limited backups and security records may remain only as long as needed for recovery, security, or legal obligations.
Support and privacy messages sent to [email protected] are accessible only to the people handling requests and are kept only as long as needed to respond, document the request, and protect the service. The in-product feedback form is not active yet; its retention and access rules will be published before launch.
Cookies and measurement
We use essential first-party cookies to keep you signed in, remember onboarding, keep the service secure, and remember your cookie choice. We also store appearance choices, such as palette and reading density, in your browser.
Optional Google Analytics measures product use only after you choose to allow analytics. Tomeful's custom events are designed not to include your email address, username, book identifiers, or search terms. We do not use advertising cookies.
lets you change that choice at any time. Analytics can remain off while the reading diary continues to work.
Your choices
You can change your profile, privacy, and analytics choices in Tomeful. To confirm processing, request access, correction, information about sharing, or deletion of account information, write to [email protected]. We respond to these requests within 20 days.
Please do not send passwords, payment details, or other sensitive information by email.
Changes and contact
If this notice changes in a material way, we will update the date above. Questions about privacy can be sent to [email protected].