Privacy & Data Transparency
Privacy Policy
Borrowable is built to help readers borrow more books from their local public library with the minimum data footprint possible.
At a glance
- No library credentials: We never ask for your library card number, library PIN, or Libby login. Borrowing happens directly on Libby.
- No reading-account passwords: We only read public Goodreads or StoryGraph shelves, or CSV exports you choose to upload.
- CSV minimization: When you import a Goodreads or StoryGraph CSV, Borrowable keeps only
title,author,ISBN,shelf, anddate-added. Personal star ratings, written reviews, private notes, and read dates are dropped immediately in your browser. - No Goodreads usernames in analytics: Product analytics use a random per-browser ID and never record your Goodreads username or display name.
- 1-click account deletion: If you create an optional account, you can permanently delete your account, sessions, and cached shelves at any time from Account Settings.
What is stored and why
| Data | Where it lives | Why it is stored | Retention |
|---|---|---|---|
| Public shelf or CSV book list (title, author, ISBN, shelf, date added) | Browser localStorage & Cloudflare D1 cache | To check ebook and audiobook availability at your selected public libraries without re-scanning your shelf on every visit. | Anonymous cached shelves are automatically pruned after 60 days. Account-linked shelves are deleted immediately when you delete your account. |
| Selected library slugs (e.g. nypl, lapl) | Browser localStorage & optional account profile | To query public OverDrive catalog availability for the libraries you use in Libby. | Stored locally in your browser or until you delete your account. |
| Optional account email & password hash (PBKDF2-SHA256) | Cloudflare D1 (users & sessions tables) | Only if you choose to create an account to sync your library cards, shelf link, and friend shelves across devices. | Until you click "Delete account" in account settings or email support@borrowable.app. |
| Anonymous product usage events | Cloudflare D1 (analytics_events) & Google Analytics | To understand aggregate feature usage, error rates, and upstream reliability using a random per-browser identifier (no Goodreads usernames or display names). | First-party analytics events are automatically pruned after 90 days. |
Third-party services
Cloudflare
Hosts Borrowable on Cloudflare Workers, D1, and KV, and provides coarse IP-based city/region lookup solely to suggest nearby public libraries on first visit.
Google Analytics
Used for aggregate traffic and page-view measurement. Goodreads usernames and personal shelf titles are never sent in analytics events.
Buy Me a Coffee
Optional external tip link to support server costs. Clicking the link opens buymeacoffee.com; no payment data touches Borrowable.
Amazon Associates
When you click an optional “Buy” link on a book card, it opens Amazon with an affiliate tag. As an Amazon Associate I earn from qualifying purchases.
Independent Tool Disclaimer & Contact
Borrowable is an independent reader tool and is not affiliated with, endorsed by, or sponsored by Goodreads, Amazon.com, Inc., The StoryGraph, OverDrive, Inc., or Libby. All trademarks belong to their respective owners.
Questions, privacy requests, or data deletion requests? Email support@borrowable.app.