Effective Date: 31 August 2026
This Privacy Policy explains how BookCubicle ("we", "us", or "our") collects, uses, and protects your personal data when you use our Platform. It should be read alongside our Terms of Service.
BookCubicle is an online reading platform connecting writers and readers. This policy applies to all users of the Platform — registered and unregistered — and covers all personal data we collect through the website and associated services. Our Platform operates under the laws of the Republic of the Union of Myanmar.
We collect the following categories of personal data:
Account & Profile Data
Writer-Specific Data
Content & Activity Data
Payment & Subscription Data
Technical Data
We use your personal data to:
BookCubicle sets a small number of first-party cookies that are strictly necessary for the site to work. With your consent, we also use Google Analytics, which sets third-party analytics cookies. We do not use cookies for advertising or cross-site behavioural profiling.
| Cookie | Purpose | Lifetime | Consent |
|---|---|---|---|
| ASP.NET Core session | Maintains your browsing session. | Until you close your browser | Strictly necessary |
| JWT refresh token | Keeps you signed in across sessions. httpOnly and Secure. | 7 days, or until you log out | Strictly necessary |
| Antiforgery token | Protects forms against cross-site request forgery. | Session | Strictly necessary |
bc_theme | Remembers your light or dark theme choice. | 1 year | Strictly necessary |
bc_consent | Records your analytics choice so we do not ask again. | 6 months | Strictly necessary |
_ga | Google Analytics — distinguishes visitors. | 2 years | Analytics (opt-in) |
_ga_<container-id> | Google Analytics — persists session state. | 2 years | Analytics (opt-in) |
cf_clearance / __cf_bm | Cloudflare Turnstile — records that a bot check on a sign-in or contact form was passed. Set only on those pages. | Up to 30 minutes | Strictly necessary |
Strictly necessary cookies do not require consent and are always active. Analytics cookies are set only after you accept them in the cookie banner. You can change your choice at any time using the Cookie settings link in the footer, or by clearing cookies in your browser.
We use a small number of third-party services that may receive limited personal data as part of normal operation:
Google Fonts
Every page on BookCubicle loads fonts from Google's CDN (fonts.googleapis.com and fonts.gstatic.com). When your browser requests a font, Google receives your IP address and browser User-Agent as part of the HTTP request. This is governed by Google's Privacy Policy. We do not control how Google processes this data.
SMTP Email Provider
We use an SMTP service to deliver all emails from BookCubicle. Your email address and the content of emails sent to you are processed by this provider. We do not use this provider for any purpose other than email delivery.
Google Analytics
If you accept analytics cookies, we use Google Analytics 4 (provided by Google Ireland Limited, with data processed by Google LLC in the United States and other countries) to understand how readers use BookCubicle. Google receives your IP address, the pages you view, and events describing how you read — such as opening a book or finishing a chapter. When you are signed in we also send a pseudonymous account identifier — a number — so that we can recognise the same reader across devices. We never send your email address, legal name, or display name to Google.
The legal basis for this processing is your consent, which you may withdraw at any time via the Cookie settings link in the footer. Analytics data is retained for 14 months. Google's processing is governed by Google's Privacy Policy. You can also install Google's browser opt-out add-on.
Analytics is never loaded on password-reset or email-verification pages, so the links we email you are not shared with Google.
Cloudflare Turnstile
Our sign-in, registration, password-reset, email-confirmation and contact forms are protected by Cloudflare Turnstile (provided by Cloudflare, Inc.), which distinguishes people from automated abuse. When one of those pages loads, your browser contacts challenges.cloudflare.com, and Cloudflare receives your IP address, User-Agent, and signals about how the page behaves in your browser. When you submit the form, our server sends the resulting one-time token and your IP address to Cloudflare to confirm the check passed.
The legal basis for this processing is our legitimate interest in keeping accounts, inboxes and support channels free of automated abuse; it is a security measure rather than an analytics or advertising one, so it is active without a cookie-consent choice and cannot be switched off while still using these forms. Turnstile is designed not to profile users across sites and is not used for advertising. Cloudflare's processing is governed by Cloudflare's Privacy Policy.
Turnstile is loaded only on the specific forms listed above — never while you are reading.
No other third-party services
We do not use Facebook Pixel, advertising networks, affiliate tracking, or any other external ad-tech service, and we place no advertising cookies. User-uploaded files (cover images, payment proofs, avatars) are stored on our own servers, not on a third-party CDN.
We do not sell your personal data. We share it only in the following limited circumstances:
| Data category | Retention period |
|---|---|
| Account and profile data | Until you delete your account |
| Books, chapters, reviews, comments | Until you delete the content or your account |
| Reading history, wishlists, goals, collections | Until you delete your account |
| Payment proof images | Minimum 1 year after the transaction |
| Payment records (text metadata) | Minimum 3 years for accounting purposes |
| JWT refresh tokens | 7 days, or until logout / revocation |
| Session records | Until revoked or account deleted |
| Support ticket messages | 2 years for moderation history |
| Anonymised aggregate analytics | Indefinitely (no personal identifiers) |
When you delete your account, we delete your personal data within a reasonable time, except for data we are required to retain by law or for legitimate financial record-keeping.
We take reasonable technical and organisational measures to protect your personal data:
No method of transmission or storage is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security. You are responsible for keeping your password and device secure.
During registration, you are asked whether you wish to receive news and updates from BookCubicle. This checkbox is unchecked by default — you must actively opt in. If you opt in, we may send you platform news, new feature announcements, and occasional promotional content.
You can withdraw your consent to marketing emails at any time by:
Opting out of marketing emails does not affect transactional emails (account verification, password reset, subscription notifications), which are required for the Platform to function.
BookCubicle is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.
If you are between 13 and the age of majority in your country, you may only use the Platform with the involvement and consent of a parent or legal guardian.
We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' advance notice by posting the updated Policy on the Platform and updating the Effective Date above. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
For questions about this Privacy Policy or how we handle your personal data, contact us at:
By using BookCubicle, you acknowledge that you have read and understood this Privacy Policy.