Privacy Policy

1. Information We Collect

When you create an account on Book Creed, we collect the following information:

• Name — used to display on leaderboards and identify contest winners
• Email address — used for account authentication, winner notifications, and optional newsletter
• Password — stored as a one-way cryptographic hash (bcrypt); we never store or have access to your plain-text password
• Shipping address (optional) — used solely for gift card prize delivery to contest winners
• Gift card preference (optional) — your preferred gift card brand for prize selection
• Quiz scores — your quiz completion data including scores, timestamps, and book associations

2. How We Use Your Information

• To provide and maintain your account
• To display your name and scores on public leaderboards
• To enter you into skill-based contests and deliver prizes to winners
• To send you newsletter emails (only if you opt in; you can unsubscribe at any time)
• To respond to your support requests

3. Data Sharing

We do not sell, rent, or share your personal information with any third parties. Your data is used exclusively for the purposes described in this policy.

Your name and quiz scores may appear on public leaderboards visible to other users of the site.

4. Data Retention

We retain your account data for as long as your account is active. If you wish to delete your account and all associated data, you may request deletion by contacting us at the email address below.

5. Your Rights

You have the right to:

• Access your personal data stored on our platform
• Correct any inaccurate information via your account settings
• Delete your account and all associated data by contacting us
• Opt out of newsletter communications at any time

6. Cookies

Book Creed uses only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or any third-party cookies. No data is shared with advertising networks or analytics providers.

7. Security

We take reasonable measures to protect your personal information, including:

• Passwords are hashed using bcrypt before storage
• All data is transmitted over HTTPS
• Access codes are stored as SHA-256 hashes
• Authentication uses secure JWT tokens with server-side validation

8. Children's Privacy

Book Creed is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates the most recent revision.

10. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, please contact us at:

privacy@bookcreed.com