Sign in

Privacy Policy

Last updated: May 23, 2026.

This Privacy Policy describes how Humcrush LLC ("we", "us") collects, uses, and protects information when you use nvllst.com (the "Service"). Our goal is to collect as little as we need and keep what we collect safe.

The Service is intended for users in the United States. Information you provide is stored and processed in the United States under U.S. law. If you access the Service from outside the U.S., the protections below describe what we offer; we do not currently extend additional rights or protections required by data-protection regimes outside the United States.

1. What we collect

We only collect information that is necessary to operate the Service:

  • Account information. Your name and email address, provided when you create an account or accept an invite. We don't collect or store passwords — sign-in uses one-time email links.
  • Reading activity. The books and chapters you open, your last-read position, your audio playback position, and how long you spend reading or listening (per book and per chapter). We use this to resume you where you left off, show your progress, and — where reviews or discussion posting require it — confirm that you've actually read a book before letting you weigh in. Some of these statistics may also be shown back to you (e.g. total time read, books finished).
  • Annotations. Highlights, notes, and bookmarks you create. We store these so they appear when you return.
  • Purchase information. When you buy a book or subscribe to a plan, we keep a record of the transaction (what you bought, when, the amount, your billing email, and the country we charged tax in). We do not see or store your full card number, security code, or other payment credentials — those are handled directly by our payment processor, Stripe (see §3).
  • Technical data. Your IP address and basic browser information, captured in server logs to maintain and secure the Service.

We do not collect:

  • Your full card number, CVV, or other payment credentials (Stripe handles these)
  • Precise location data
  • Data from other services or social networks

2. How we use information

We use the information above only to:

  • Sign you in and keep your session active
  • Show you the books you have access to
  • Save and restore your reading position, preferences, and annotations
  • Email you about your account (e.g. sign-in links) and important Service notices
  • Diagnose problems and protect the Service from abuse

We do not sell your data, and we do not use it for advertising.

3. Sharing your information

We share your information only with the small number of service providers needed to operate nvllst:

  • Postmark (postmarkapp.com) delivers transactional email such as magic-link sign-ins, account notices, and receipts.
  • Hostinger / Hostinger Cloud hosts the application and the database.
  • Stripe (stripe.com) processes payments for one-time purchases and subscriptions. Stripe receives your card details and billing information directly; we only receive a record of the transaction.

These providers process your data on our behalf and are bound by their own privacy commitments.

If a book you read is associated with an author on nvllst, that author may see the annotations you make on their work in aggregate or attributed form (e.g. "Joseph left a note: …"). This is part of how the Service connects readers and writers. You can delete an annotation at any time, and it disappears from the author's view as well.

We will disclose information when required by law, when necessary to protect rights, safety, or property, or as part of a business transfer (with notice to you).

4. Cookies and local storage

We use a session cookie to keep you signed in across pages. We do not use third-party advertising or analytics cookies.

The Service uses your browser's local storage to remember your reading preferences (font, size, theme, sleep-timer settings, etc.) so they persist across visits. This data stays in your browser and is not transmitted to us. Reading positions, progress, and reading-time statistics are stored on our servers (see §1) so they travel with you across devices.

5. Data retention

We keep your account information for as long as your account is active. Reading activity and annotations are kept while your account exists. Server logs are kept for up to 30 days.

Transaction records (purchases, subscriptions, refunds) are retained for at least seven years after the transaction in order to meet tax, accounting, and consumer-protection obligations, even after you close your account.

When you close your account, we delete your personal information and annotations within 30 days, except for records we are required to retain by law (including the transaction records described above).

6. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your account and associated data
  • Object to or restrict certain processing
  • Receive a copy of your data in a portable format

To exercise any of these rights, write to [email protected]. We respond within 30 days.

7. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Security

We use industry-standard practices to protect your information, including encrypted connections (HTTPS) and access controls on our database. No system is perfectly secure, but we take security seriously.

9. International users

nvllst is built for and intended for users in the United States. Humcrush LLC is based in the United States, and your information is stored and processed there under U.S. law. If you access the Service from outside the U.S., you do so on your own initiative; we do not currently tailor the Service to non-U.S. data-protection frameworks (for example, GDPR or UK GDPR) and we do not act as a controller or processor of your data under those regimes.

10. Changes

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be communicated through the Service or by email.

11. Contact

Questions about this Privacy Policy can be sent to [email protected].