Privacy Policy
Last updated: 23 September 2026
1. Summary
Here's the short version before the legal detail:
- You can use Novelshell without an account. Reading, searching, and browsing are all possible without giving us anything.
- We don't ask for personal information beyond what's needed for an optional account (name, email).
- Almost everything is stored on your device — saved books, reading progress, theme choice, search history. Not on our servers.
- If you create an account, we store your name, email, and saved/library data in Firebase (Google) so it syncs across devices.
- We use third-party ad networks for visitors without an account. Those networks may set their own cookies. This is disclosed in detail below.
- We never sell your personal information.
- You can delete your account at any time, and we'll delete your data.
2. Who we are
Novelshell is operated by Novelshell Inc, by Amimo LLC ("we", "us", "our"). We are the data controller responsible for the personal information described in this policy.
For any privacy-related question, request, or complaint, contact us at the address in Section 17.
3. Information we collect
3.1 Information you give us
- Account details — if you create an account: your display name, email address, and (optionally) a profile picture.
- Saved content — books you save to your library, articles you mark as favourites, search history (only if you are signed in).
- Communications — if you email us, we receive the contents of your message and your email address.
3.2 Information collected automatically
- Approximate location — derived from your IP address, used only to select a sensible default region for recommendations. We do not store precise location.
- Device & browser information — user agent, language, screen size, so the app renders correctly.
- Error and performance data — basic logs of failed requests (e.g. a book cover failing to load) so we can fix bugs.
3.3 Information we do not collect
- We do not collect passwords (Firebase stores only a salted hash; we never see them).
- We do not collect precise GPS location.
- We do not collect payment information (the Service is free).
- We do not collect contacts, photos, calendars, or files from your device.
- We do not read your clipboard or keystrokes outside the search input.
4. How we use information
We use the information we collect for the following purposes:
- To provide the Service — show books, render your library, sync saved items across devices if you're signed in.
- To personalise your experience — remember your theme, region, and reading preferences.
- To improve the Service — understand which books are popular, where errors happen, and what to fix.
- To communicate with you — send essential notices such as changes to this policy or your account.
- To keep the Service safe — detect abuse, fraud, or attempts to disrupt the Service.
- To display advertising — served by third-party networks to visitors without an account. See Section 8.
- To comply with the law — where we are legally required to do so.
We rely on the following legal bases (under GDPR where applicable) for processing:
| Purpose | Legal basis |
|---|---|
| Running your account and syncing saved books | Performance of a contract |
| Remembering your theme and preferences | Legitimate interests (smooth experience) |
| Displaying ads to non-signed-in users | Consent where required; otherwise legitimate interests |
| Detecting abuse, fraud, and security incidents | Legitimate interests |
| Responding to your emails or legal requests | Legitimate interests, legal obligation |
5. Local storage & cookies
5.1 What we store on your device
We use the browser's localStorage and sessionStorage APIs —
not cookies — to store small pieces of data on your own device. This data never
leaves your device unless you sign in and sync it.
The main things we store locally are:
- Your theme choice (light / dark).
- Your region preference.
- Saved books, liked items, and last-read positions (if you're not signed in).
- Recent searches (if you're not signed in).
- Whether you have already dismissed certain prompts or granted notification permission.
5.2 Cookies set by third parties
Novelshell itself does not set cookies. However, third-party services loaded by the app — especially advertising networks and Google Firebase — may set their own cookies and identifiers. See Section 7 and Section 8 for details.
5.3 How to clear this data
You can clear all locally stored data at any time from your browser's settings (usually "Clear site data" or "Clear storage"). This will remove your preferences, saved books, and reading position. If you are signed in, your account data remains on our servers and will re-sync on your next visit.
6. Accounts & authentication
Creating an account is optional. If you do, we authenticate you using Google Firebase Authentication. Firebase supports email/password sign-in and Google Sign-In. When you use Google Sign-In, Google shares with us only:
- Your name (as shown on your Google profile).
- Your email address.
- Your Google profile picture URL.
- A unique user ID.
We never receive your Google password, and Google does not share with us any other data about your Google account.
Your account data (display name, email, saved books, liked items, followed topics, search history) is stored in Google Cloud Firestore. Access is restricted by Firebase security rules so that only you can read or write your own document, plus our administrators where legally required.
7. Third-party services
Novelshell relies on several third-party services to operate. Each is governed by its own privacy policy, and each receives only the minimum data needed to do its job.
| Service | What it does | What it sees |
|---|---|---|
| Gutendex (gutendex.com) |
Free public API over Project Gutenberg's catalog | Search queries you type, your IP address |
| Project Gutenberg (gutenberg.org) |
Hosts the original public-domain texts | Your IP address when you open a book's text |
| Open Library (openlibrary.org) |
Additional open catalog source | Search queries, your IP address |
| Internet Archive (archive.org) |
Additional open catalog source | Search queries, your IP address |
| Firebase (Google) | Authentication & Firestore storage of your account data | Your email, name, picture URL, sign-in events |
| Google Fonts | Serves the Fraunces and Inter typefaces | Your IP address, browser info |
| Cloudflare | Hosts and delivers Novelshell | Your IP address, request headers, standard CDN logs |
| Adsterra & affiliates | Advertising for non-signed-in visitors | See Section 8 |
We do not control these services and are not responsible for their privacy practices. We encourage you to review their policies if you have concerns.
8. Advertising & ad networks
8.1 Why we show ads
Novelshell is free to use. To keep it running, we display advertisements supplied by third-party networks to visitors who are not signed in. Signed-in users with an ad-free experience (where offered) do not see these ads.
8.2 The networks we use
Our primary ad partner is Adsterra, along with its affiliated
delivery domains (including profitableratecpmnetwork.com and
highrevenueformat.com). Adsterra is a third party that serves ads on
behalf of many advertisers.
8.3 What ad networks may collect
When an ad is displayed, the network may collect:
- Your IP address (used for geo-targeting and fraud prevention).
- Your device type, operating system, and browser.
- Cookies and similar identifiers set by the ad network itself.
- Information about which pages or ads you interact with.
- Referrer (which site sent you).
We do not control what these networks collect. Their collection is governed by their own privacy policies. Adsterra's privacy policy is available on their website.
8.4 Ads are not endorsed by us
Novelshell does not screen or endorse the products, services, or claims made by any advertiser. Any purchase or interaction you have with an advertiser is solely between you and that advertiser.
8.5 How to reduce ad tracking
- Sign in. Signed-in accounts receive fewer (or zero) ads.
- Use a browser with strong tracking protection — Firefox, Brave, or Safari with privacy settings enabled.
- Use an ad blocker. We don't block ad blockers; you're welcome to use one.
- Use your device's ad settings. Both iOS and Android let you limit ad tracking at the OS level.
9. How we share information
We do not sell your personal information. We share information only in the limited ways described below:
- With service providers listed in Section 7, strictly to operate the Service.
- With advertising networks for non-signed-in visitors, as described in Section 8.
- For legal reasons — if we are required by law, subpoena, court order, or governmental request to disclose information, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
- In a business transfer — if Novelshell is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
- With your consent — for any other purpose, but only if you agree first.
10. Data retention
- Account data is retained for as long as your account exists. When you delete your account, we delete your data within 30 days, except where we are legally required to retain it longer.
- Local device data (theme, saved books, reading position) stays on your device until you clear it or uninstall the browser.
- Server logs from Cloudflare and other providers are typically retained for a short period (usually 30 days or less) for security and abuse prevention.
- Analytics or error logs (if enabled) are retained for a maximum of 12 months.
11. Security
We take reasonable measures to protect the information we hold. These include:
- HTTPS everywhere — all traffic between your browser and Novelshell is encrypted.
- Firebase Authentication — passwords are hashed and salted; we never see them.
- Firestore security rules — only you can read or write your own account document.
- Least-privilege access — our team has access to user data only where necessary.
No system is perfectly secure. We cannot guarantee that unauthorised access, hacking, data loss, or other breaches will never occur. If we become aware of a breach that affects your personal information, we will notify you as required by applicable law.
12. Children's privacy
Novelshell is not directed at children under the age of 13 (or the minimum age in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children.
The books in our catalog include works for all ages, and children may certainly read them. But creating an account — which is what involves us collecting personal information — requires being old enough to consent under your local law. If you are under that age, please ask a parent or guardian to create the account for you, or use Novelshell without signing in.
If you believe a child has provided us with personal information without parental consent, please contact us at the address in Section 17 and we will delete it promptly.
13. Your rights
13.1 For everyone
You can, at any time:
- Access the personal information we hold about you (mostly visible on your profile page).
- Correct inaccurate information — you can edit your display name directly in the app, or email us.
- Delete your account and personal information — email us and we'll delete it within 30 days.
- Export your saved books and library as a list — email us and we'll send you a copy.
- Object to processing, or withdraw consent where we relied on it.
13.2 If you are in the European Economic Area, the UK, or Switzerland (GDPR)
You have additional rights under the GDPR, including:
- The right to be informed (this policy serves that purpose).
- The right of access, rectification, and erasure.
- The right to restrict processing.
- The right to data portability.
- The right to object to processing based on legitimate interests.
- The right to lodge a complaint with your local data-protection authority.
13.3 If you are a California resident (CCPA / CPRA)
You have the right to:
- Know what personal information we collect, use, or disclose.
- Request deletion of your personal information.
- Opt out of the "sale" or "sharing" of personal information — we do not sell or share your personal information for cross-context behavioural advertising beyond what our ad partners do for the ads you see. Contact us to opt out of any such sharing.
- Non-discrimination — we will not deny you service for exercising your privacy rights.
13.4 How to exercise your rights
Email us at the address in Section 17. We will respond within the timeframe required by applicable law (usually 30 days). We may ask you to verify your identity before processing your request.
14. International transfers
Novelshell is delivered globally. Our servers — and those of our service providers (Cloudflare, Google/Firebase, Adsterra) — may be located in jurisdictions other than your own, including the United States and the European Union.
When we transfer personal information across borders, we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or your explicit consent, as required by applicable law.
15. Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. There is no universal standard for how websites should respond, and we do not currently respond to DNT signals.
That said, our ad network partners may respond to DNT or other privacy signals (such as Global Privacy Control) in their own ways. See your browser's settings and your ad network's documentation for details.
16. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. The most current version will always be available at this URL.
If we make material changes to how we handle your personal information, we will make reasonable efforts to notify you — for example, by showing a notice on the Service. By continuing to use Novelshell after changes take effect, you agree to the revised policy.
17. Contact us
For any privacy-related question, request, or complaint, please contact our privacy team:
Novelshell Inc, by Amimo LLC
Privacy team: privacy@amimollc.com
Legal / DMCA: legal@amimollc.com
Website: novelshell.pages.dev
By using Novelshell, you confirm that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use the Service.