The service operator
CC Technologies GmbH is the operator of One Book a Day. For privacy questions and requests, email info@cctechnologies.business.
Reading and account information
- Sign-in: your verified email address and necessary authentication and security records let you access your account and receive one-time sign-in codes.
- Preferences: your chosen topics, language, timezone, country where provided, and reminder settings help determine suitable assignments and presentation.
- Reading: assigned books, reading depth and progress, saved books, and completed actions let you resume and revisit your reading.
- Notifications: registered device identifiers, encrypted push tokens, permission settings, and delivery records support native notifications and book-count badges. Ordinary support views do not expose push tokens.
- Support and operations: support notes, necessary security records, and audited staff actions help us operate and protect the service.
Service access does not require a marketing opt-in. Optional retailer clicks may be recorded as clicks, not as evidence of a purchase.
Public website analytics
We use self-hosted Umami on this public website to understand aggregate visits. Page-view information can include the public page visited, referring website origin, browser language, screen/device information, and an approximate location derived by the analytics service.
This website’s integration excludes URL query strings and fragments, private app paths, account identifiers, form contents, and click text. It does not set analytics cookies and respects the browser’s Do Not Track signal. The website tracker is not embedded in the private reading app by this website integration.
How information is used and shared
Our hosting, transactional-email, and enabled push-notification providers process the information necessary to deliver their part of the service. The app also measures engagement and operations using aggregated results, withholding small reader cohorts.
When you follow an optional link to a retailer, that retailer handles information under its own privacy notice. We do not treat the link click as a completed purchase.
Contact us for current provider details or questions about the processing relevant to your account.
Retention and deletion
While your account is active, we retain the reader information needed to provide the service. Some operational and engagement records have their own configured retention rules.
When account deletion completes, the live reader account and its linked reader records are removed, registered reader-device tokens are deleted, and sessions are revoked. See which data is removed.
Deletion has specific retention exceptions. Encrypted rolling database backups are retained for 14 days, so a backup copy may remain until that backup expires. Operational security/audit records are retained without raw email addresses or device tokens; they may contain pseudonymous identifiers and currently have no automated expiry. Revoked session and other necessary security records follow their operational cleanup rules. Deletion is not a promise that every historical security or backup record disappears immediately.
Your choices and rights
In Profile you can change preferences, disable reminders, download your account data, and delete your account after recent authentication. Device notification permissions can also be changed in your device settings.
You may contact us to request access, correction, deletion, or to raise an objection or other data-rights concern. Applicable data-protection law may also provide rights to restrict processing, portability, and to complain to a supervisory authority. We may need to verify that a request relates to your own account.
For the practical steps, including an email request if you cannot use the app, visit Delete your account.