Privacy Policy
Last updated: July 2026 · The German version is legally binding.
Hosting
This site is served via Cloudflare Pages (Cloudflare, Inc.). On access, technically necessary access data (including your IP address) is processed in server log files.
Local storage — no cookies
While you are not signed in, your library, reading status, ratings, theme, language and accent colour are stored only locally in your browser (localStorage). No cookies are set.
Account & cloud (optional)
Only when you sign up is an account created with Supabase (EU region). It processes your email address, your password (stored encrypted), shared library data (such as titles, ISBNs, notes, tags and inventory status), and your personal reading data (such as reading status, progress, ratings and borrowed books). Signing in and syncing transmits your IP address to Supabase. If you share a library via invite link, signed-in members can view or edit the shared inventory according to their role. Your personal reading data is accessible only to you. Legal basis: contract / consent (Art. 6(1)(a/b) GDPR).
Book data (Open Library)
Scanning or looking up an ISBN and loading book covers sends requests to openlibrary.org and covers.openlibrary.org (Internet Archive); this transmits the ISBN and your IP address to that service.
Camera
Barcode scanning runs entirely locally in your browser. No camera images are transmitted or stored.
Technical error counts
To improve stability, Verso counts technical events such as failed syncs or camera starts by day. Only the date, event kind, and count are stored — no email address, user ID, URL, error message, ISBN, or book data. The counter is sent through Supabase, which technically processes the IP address.
Error reports
When something crashes, Verso sends a technical error report to GlitchTip (app.glitchtip.com,
Burke Software and Consulting LLC, USA). It transmits the error message, the stack trace from
our own code, browser and device details, and the route the error happened on — with
identifiers removed (e.g. /book/:id rather than the book id). It also includes
your last few interactions, but only as the kind of element you clicked (e.g. a.spine[title]) — the contents of such attributes are stripped before the report
leaves your device. The report does not contain your user ID, email address, network requests,
console output, ISBNs, book titles, or any other library data. Your IP address is — as with
any connection — technically processed in order to deliver the report at all; it is not part
of the stored report, and GlitchTip is configured not to retain it. Legal basis: legitimate
interest in a working application (Art. 6(1)(f) GDPR).
Bot protection on sign-in
The sign-in and sign-up form uses Cloudflare Turnstile (Cloudflare, Inc.). This loads a script from challenges.cloudflare.com and transmits your IP address and technical browser characteristics to Cloudflare. Turnstile sets no advertising cookies and builds no cross-site profile. If you block the script, the form still works. Legal basis: legitimate interest in preventing automated sign-ups (Art. 6(1)(f) GDPR).
Analytics
The landing page uses GoatCounter for anonymous, cookieless analytics (aggregated page views, without cookies, cross-site tracking, or personal profiles). Legal basis: legitimate interest in privacy-friendly statistics (Art. 6(1)(f) GDPR).
Your rights & contact
Access, rectification and erasure: . You can permanently delete your account and its data from “Account & data” in the menu.