ESTANTE HQ / PRIVACY POLICY
UPDATED OCT 29 2026 · VERSION 1

This translation is provided for convenience; the Portuguese version prevails.

PRIVACY POLICY

1. WHO LOOKS AFTER YOUR DATA

Estante HQ is run by Henrique Pereira, an individual, in Brazil. He is the controller of your personal data, under the General Data Protection Law (Law 13,709/2018).

For anything about your data, write to privacidade@estantehq.com. This is the channel of communication with the controller.

2. WHAT WE COLLECT

When you create the account: e-mail, name, @ username and password. The password is stored encrypted; nobody can read it. If you sign in with Google, we receive from Google your name, e-mail and photo, your Google account identifier and the access keys Google issues for that sign-in.

What you choose to fill in: profile photo, bio (up to 200 characters), city and the editions you pin to the top of your profile.

Your collection: the copies you record, the reading status and page, the condition, where each one is kept, the price you paid, the date you finished reading, your wishlist with priorities and your preferences for formats, publishers and characters.

What you do with other people: who you follow and who follows you, and the suggestions you dismissed in Find people.

Your contributions: editions you submit to the catalogue (with the notes), error reports, and, if you are a curator, curation decisions and corrections.

Activity: a record of what you add and read, which feeds the feed of the people who follow you.

Automatically, while you use it:

  • In each session: the IP address, the browser or device and the approximate city, worked out from the IP. You can see this information in Profile / Sessions.
  • In the app: the device identifier for notifications.
  • To contain abuse: counters by IP, by account or by the e-mail used in Contact, deleted within a day.
  • On the website: anonymous visit statistics.

When you talk to us: the e-mail, the subject and the message you send in Contact.

We do not collect CPF, phone number, address, payment data or your exact position.

3. WHAT WE USE IT FOR

  • Making Estante HQ work for you: keeping the account, storing the collection, showing gaps, releases and numbers. Legal basis: performance of the contract (art. 7, V).
  • Showing your profile and your activity to other people, the way you choose in Profile / Privacy. Legal basis: performance of the contract, with your visibility choices.
  • Sending notices in the app, by notification and by e-mail, according to your choices in Notifications. Account e-mails (verification, password reset, deletion) are always sent. Legal basis: performance of the contract.
  • Protecting your account and the service: sessions, usage limits, abuse and fraud prevention. Legal basis: legitimate interest (art. 7, IX).
  • Understanding use of the website with anonymous visit statistics. Legal basis: legitimate interest.
  • Answering your messages. Legal basis: legitimate interest and, when it is a request about your data, compliance with a legal obligation (art. 7, II).

We do not sell your data and we do not use it for targeted advertising.

4. WHAT IS PUBLIC

  • Always public: your @, your name, your photo and since when you have been on Estante HQ.
  • Public if you fill it in: the bio and the city.
  • The numbers of followers and following appear on your profile.
  • Your shelf appears according to your choice in Profile / Privacy: ONLY ME (the default), FOLLOWERS or ANYONE. Along with it go:
  • the copies, the numbers and the highlights;
  • the lists of who you follow and who follows you;
  • who you both follow in common.

With ANYONE, your profile may appear in search engines such as Google.

  • If you are a curator, the profile shows the editions you reviewed and how many there were, whatever the choice above.
  • Find people only shows you to other people if you turn that option on and your shelf is not ONLY ME.
  • The editions you submit to the catalogue show that they were submitted by you.
  • Your e-mail is never public.

5. WHO WE SHARE WITH

We use companies that provide services to Estante HQ and only process the data for that purpose:

  • Neon (United States): stores the database.
  • Vercel (United States): runs the website and the API, stores profile photos and covers and measures anonymous visits.
  • Resend (United States): sends the e-mails and keeps delivery records. It receives your e-mail and the content of the message.
  • Google (United States): if you sign in with Google, to confirm who you are; and Gmail, where the messages sent in Contact arrive.
  • Expo and Google Firebase (United States): deliver the app notifications. They receive the device identifier and the text of the notice.

These services are outside Brazil. This international transfer is made to perform the contract with you (art. 33, IX), with providers that adopt security standards compatible with the LGPD.

We may also share data when the law or a court order requires it.

To complete catalogue entries we consult Google Books and the Brazilian Book Chamber (Câmara Brasileira do Livro), but we only send the ISBN of the edition, never data about you.

6. COOKIES AND BROWSER STORAGE

We use only what the website needs to work:

  • better-auth.session_token (on the published site, __Secure-better-auth.session_token): keeps you signed in.
  • better-auth.state: exists for five minutes while you sign in with Google, to protect that sign-in.
  • hq-onboarded: remembers that you have already been through the welcome.
  • NEXT_LOCALE: remembers the language of the site.
  • In the browser (these are not cookies and stay only on your device): the light or dark theme, the scan tray while you scan, notices you have already closed and the action you were doing when you needed to sign in.

Vercel's visit statistics do not use cookies and do not identify you.

7. HOW LONG WE KEEP IT

  • The account and the collection: as long as the account exists.
  • Sessions (with IP, device and city): until you sign out or the session expires, which happens after 7 days without use. Expired sessions are deleted daily.
  • Feed activity: 180 days.
  • Notices: 90 days.
  • Usage-limit counters: up to a day.
  • Verification and password-reset codes: one hour.
  • Contact messages: in the Estante HQ mailbox, for as long as needed to answer and resolve the request.

When you delete the account, it stays on hold for 7 days; if you sign in again within that period, it comes back. After that, we delete:

  • the account and the profile photo;
  • the collection and the wishlist;
  • followers and following;
  • the activity and the preferences;
  • the notices and the submissions still under review;
  • the notes you wrote on submissions and the text of your reports.

The data of the editions you submitted, the reasons for the reports and the curation corrections stay in the catalogue, without your name.

8. YOUR RIGHTS

Under the LGPD (art. 18), you can:

  • confirm whether we process your data and have access to it;
  • correct incomplete or wrong data;
  • ask for anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law;
  • ask for the portability of your data;
  • know who we share it with;
  • revoke consents and object to processing;
  • delete the account at any time.

You can do a lot yourself:

  • edit the profile in Profile / Account;
  • choose who sees the shelf in Profile / Privacy;
  • end sessions in Profile / Sessions;
  • adjust notices in Notifications and unsubscribe from e-mails using the link in the footer of each one;
  • delete the account in Profile / Delete account.

For the rest, including receiving a copy of your data, write to privacidade@estantehq.com. We reply within 15 days. If you are not satisfied, you can complain to the National Data Protection Authority (ANPD).

9. SECURITY

The website and the app only communicate over an encrypted connection (HTTPS). Passwords are stored encrypted, you can end sessions at any time and access to the data is restricted to those who maintain the service.

If a security incident happens that may affect you, we will tell you and the ANPD, as the law requires.

10. MINORS

Estante HQ is for people over 18. We do not knowingly collect data from minors. If we learn that an account belongs to someone under 18, we will close it and delete its data.

11. CHANGES TO THIS POLICY

When we change something important in this policy, we tell you in Notices and by e-mail before the change takes effect. The date and version at the top of the page show which text is in force.

12. CONTACT

privacidade@estantehq.com, or the Contact page with the subject PRIVACY.