Privacy policy

Logfolio is run by Naeem Noor. This page explains what we store, why, and what you can do about it. Questions go to hello@logfolio.co.

What we store

• Your email address, so you can sign in. We also send you one welcome email when you join.
• If you sign in with Google: the name, email address, and profile picture link Google shares with us.
• Your username, display name, and bio.
• What you log: entries, ratings, dates, reviews, tags, featured entries, notes, and any custom types and fields you create.
• For each sign-in session: the session itself, your IP address, and your browser's user agent.
• If you report a profile: the report, your account if you're signed in, and a one-way hash of your IP address that we use only to limit how many reports one person can send.
• Photos you upload (Pro): saved on our server in three sizes. Location and other hidden photo data are removed, and the original file isn't kept. Private photos are shown only to you.
• When something breaks on our side: the error message, the page address, and the time, kept for 30 days.
• For imports: how many rows were imported, skipped, or failed. The file you upload (an export from Goodreads, StoryGraph, Letterboxd, IMDb, Netflix, Discogs, or Pocket, a browser bookmarks file, or Kindle clippings) is read once to create entries and is not kept.
• If you connect GitHub: we keep your username and your public repos (name, description, language, stars, link, dates). We ask for no permissions and don't keep the sign-in token. We sync when you connect, when you press Sync now, and once a day.
• If you connect Steam: we keep your SteamID and your played games (name, app id, hours, last played). We never see your Steam password. We sync only when you connect or press Sync now, and store it on the server named below.
• Synced items become entries you can edit or delete. Disconnecting stops syncing and keeps them.

What is public

Your profile at logfolio.co/yourname is public, along with your Google profile picture if you sign in with Google, and every entry you haven't marked private, including its tags. Search engines can find and index it. Private entries and unpublished notes are never shown to anyone else. Private entries, published notes, and a private profile are Pro features.

Cookies and tracking

We use cookies only to keep you signed in. Your light or dark theme choice is saved in your browser, not on our servers. There are no ads and no tracking cookies.

We count page visits with Cloudflare Web Analytics. It sets no cookies, doesn't try to identify you, and doesn't follow you to other sites. It records which pages are visited, the site that sent you, your browser, device type, and country, and how fast pages load. It sends only the page's path, never anything after a “?” in the address, so it never sees what you search for. It never sees what you log or write.

Who else handles your data

• Hostinger hosts the server and database, in Paris, France. Your account and your log, Steam and GitHub data included, are kept there.
• Resend delivers our emails (sign-in links and the welcome email), so it sees your email address.
• Cloudflare (R2) stores the photos and images you upload, plus covers and profile pictures, and a copy of our nightly backups. The backups are encrypted before they leave our server, so Cloudflare can't read them. Images are only ever shown through our site, which checks who can see each one.
• Cloudflare Web Analytics counts page visits, as described above.
• Google, only if you choose to sign in with Google.
• Polar handles payments for Pro. We never see or store your card details.
• Open Library (run by the Internet Archive): book covers load from it, so your browser contacts it when a page shows one. Album covers (from the Cover Art Archive) and film and TV posters (from Trakt) are copied to our storage, so your browser never contacts them. When you search for a book, album, film, or show to add, our server sends what you typed to Open Library, MusicBrainz, or Trakt, never who you are.

We don't sell your data or share it with anyone else.

How long we keep it

We keep your data until you delete it. Deleting your account in Settings removes your account and everything in it from our database straight away. Copies in backups are gone within 30 days.

Your choices

• Edit or delete any entry, note, or type at any time.
• Download everything you've logged from Settings.
• Delete your account from Settings. It can't be undone.
• Ask us what we hold about you, or to correct it, at hello@logfolio.co.

Children

Logfolio is not for anyone under 16.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect.