← Back to home

Privacy Policy

Last updated: March 3, 2026

Overview

BookJourney is a small, open-source tool for managing reading queues in group sessions. We collect only the minimum data needed to make the app work. We do not sell, share, or monetize your data in any way.

What we collect

From Discord (when you sign in)

  • Your Discord username and display name
  • Your Discord profile picture URL
  • Your email address (provided by Discord via the email scope)
  • An internal Discord user ID (used to identify you across sessions)

We do not receive your password, server memberships, messages, or any other Discord data beyond the fields above.

Session data (created by you)

  • Book title, author name, session title, and synopsis you enter when creating a session
  • Session passcode (stored as a one-way hash — we cannot read the original)
  • Queue positions and reading status
  • Words and phrases you save during a reading session

Push notification subscription (optional)

  • A browser-generated push endpoint and encryption keys
  • Used only to send you turn notifications
  • You can revoke this at any time from the session room or your browser settings

What we do NOT collect

  • Passwords
  • IP addresses or device fingerprints
  • Browsing history or analytics events
  • Discord server memberships, messages, or activity
  • Any data from Discord beyond what is listed above

How data is used

Your data is used exclusively to operate BookJourney — displaying your name and avatar in sessions, managing reading queues, and sending turn notifications if you opt in. Nothing else.

Data retention and automatic deletion

  • Ended sessions and all their data (queue, words, participants) are automatically deleted 7 days after the session ends.
  • Hosts can manually delete a session at any time from the dashboard — this instantly removes all associated data.
  • Push notification subscriptions are deleted when you disable notifications or sign out.
  • Your profile (name, avatar) persists as long as you have an account. It is deleted when your account is removed.

Third-party services

Convex

Our backend and database provider. All data is stored on Convex infrastructure. See Convex's Privacy Policy.

Discord

Used only for sign-in (OAuth). We request the following scopes: identify and email — the standard set provided by the authentication library we use. See Discord's Privacy Policy.

Web Push (browser native)

Turn notifications are delivered through your browser's built-in push infrastructure (e.g. Google FCM for Chrome). We do not control this infrastructure and only send the notification payload.

Your rights

You can request deletion of your account and all associated data at any time by contacting us via the GitHub issue tracker. We will process the request within 7 days.

Open source

BookJourney is fully open source. You can review exactly what data is collected and how it is handled in the source code on GitHub.

Changes to this policy

If this policy changes, the “Last updated” date above will be updated. We will not make changes that reduce your privacy without a clear notice.

← Back to BookJourney