Last updated: 2026-10-05
This Privacy Policy explains what personal data Digital Library collects, why, who we share it with, how long we keep it and the choices you have. It applies to the Digital Library website and the services described in our Terms of Service.
1. Who we are
The Service is operated by [Legal entity name], [Registered address], Lebanon ("Digital Library", "we", "us"), which is responsible for your personal data. You can contact us about privacy at any time through our Contact page.
2. Data we collect
2.1 Account data
- Your email address (used to sign in with one-time codes and to send receipts and service messages).
- Your name, if you provide one, and your preferred language.
- Your phone number, only if you choose to add one.
- Account metadata: when the account was created, its role, and your active sign-in sessions (including the browser type and approximate network information of each session).
We do not use passwords for customer accounts. Sign-in codes are stored only in hashed form where the sign-in method allows it, expire within 10 minutes, and are never shown to our staff.
2.2 Orders and payments
- What you bought, prices, any promo code, the order number and its status history, and the approximate country your order was placed from.
- Contact details given at checkout (email and, optionally, phone).
- For Whish Money payments: the transaction reference you submit, the sending phone number if you provide it, and any receipt image or document you upload as payment evidence.
- If card payments are enabled in the future, the card processor will collect your card details directly. We would receive only a confirmation, the amount and limited details such as the card brand, never your full card number.
2.3 Library, reading and downloads
- The titles in your library (your licences), your favourites, and your reading progress and bookmarks so you can continue where you left off.
- A log of each download or read request: the title and file, time, approximate country, browser information (user agent), a random device identifier, and a one-way hash of your IP address. We do not store your raw IP address in these logs.
2.4 Reviews, support and contact messages
- Reviews and ratings you post, with your display name.
- Support chat conversations and any attachments you send.
- Messages sent through the contact form, including the name and email address you enter.
2.5 Technical data and logs
Our hosting provider records standard request information (such as IP address, time, requested page and browser) in short-lived server logs used for security and troubleshooting. We do not use third-party analytics, advertising or tracking tools.
3. Cookies and similar technologies
We use only cookies and browser storage that the site needs to work or that remember your choices. We do not use advertising or cross-site tracking cookies.
| Name | Purpose | Duration |
|---|---|---|
| Session cookie (dv.session_token) and session cache (dv.session_data) | Keep you signed in securely | Up to 30 days; cache 5 minutes |
| dv_cart | Remember the cart of a signed-out visitor | Up to 30 days |
| dv_device | Random, signed device identifier used for fair-use download limits | Long-lived |
| NEXT_LOCALE | Remember your language preference | Long-lived |
| dv_reader | Remember your reader settings (font size, theme, layout) | Long-lived |
| theme (browser storage) | Remember light or dark mode | Until cleared |
| dv_support_dock (browser storage) | Remember whether the support chat panel is open | Until cleared |
The reader may also keep a copy of a book you opened in your browser's storage so it loads faster next time. You can clear cookies and site data in your browser settings at any time; if you block essential cookies, sign-in and checkout will not work.
4. Why we use your data
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating your account and signing you in | Email, phone (if added), sessions | Performing our contract with you |
| Processing orders, verifying payments and delivering your books | Order and payment data, receipts | Performing our contract; legal obligations (accounting) |
| Providing your library, reader and downloads | Licences, reading progress, download logs | Performing our contract |
| Enforcing fair use and preventing fraud and piracy | Download logs, device identifier, hashed IP, payment evidence | Our legitimate interest in protecting authors, customers and the Service |
| Answering support requests and contact messages | Messages, attachments, account and order data | Performing our contract; legitimate interest |
| Publishing reviews | Review text, rating, display name | Your choice to post; legitimate interest |
| Sending service emails (sign-in codes, receipts, order and support updates) | Email address, order data | Performing our contract |
| Keeping the Service secure and keeping staff accountable | Logs, staff audit records | Legitimate interest; legal obligations |
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you. We do not send marketing emails unless you have agreed to receive them.
5. Who we share data with
We share personal data only with the service providers that run the Service for us, under contracts that restrict their use of it, and only as far as needed:
| Provider | Role | Data involved | Location |
|---|---|---|---|
| Neon | Database and file storage (including book files and payment receipts) | All data described in section 2 | United States (Ohio) |
| Netlify | Website hosting, server functions and request logs | Request data and the data processed for each page | Server functions in the United States (Ohio); static content cached on a global edge network |
| Resend (or the email provider we use at the time) | Sending emails | Your email address and the content of emails we send you | [Email provider region] |
| Whish Money | Payment service | The transfer you make is handled by Whish under its own terms; in a direct integration, the order amount and reference | Lebanon |
| Card payment processor (if enabled later) | Card payments | Email, order amount and reference; card details collected directly by the processor | [Processor region] |
| WhatsApp (Meta), only if phone sign-in is enabled and you choose it | Delivering sign-in codes by message | Your phone number and the code | Global |
We may also disclose data if required by law or a valid order of a competent authority, to protect our rights or the safety of others, or as part of a sale or reorganisation of our business (in which case this Policy will continue to protect your data).
6. International transfers
Our main data storage and website servers are in the United States. Some providers may process data in other countries. Where this happens, we rely on the provider's contractual and security commitments to protect your data to a standard comparable to this Policy.
7. How long we keep data
| Data | Retention |
|---|---|
| Sign-in codes | Up to 10 minutes, or until used |
| Sign-in sessions | Up to 30 days, or until you sign out or revoke them |
| Guest carts | 30 days |
| Unpaid orders | Expire after 48 hours; the record is kept with the order history |
| Account profile | Until you delete your account |
| Orders, payments, payment evidence and licences | As long as needed for accounting, tax, fraud-prevention and legal purposes, including after account deletion |
| Download logs, support conversations, contact messages, email logs and notifications | Kept to operate the Service and resolve disputes; we review and remove data we no longer need |
| Staff audit records | Kept for security and accountability |
| Backups | Overwritten on a rolling basis |
8. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the use of your personal data, and to receive a copy of it.
- Access and correction: you can see and change your name, email address, phone number and language on your Account page. You can see your orders, library, favourites, reviews and support conversations in your account, and export your favourites.
- Deletion: you can delete your account yourself on your Account page. Deletion signs you out everywhere, removes your name, email address and phone number from your account, and ends your access to your library. We keep order, payment and licence records in anonymised or minimised form where we must for accounting, legal or fraud-prevention reasons.
- Other requests: for a copy of your data or any other privacy request, contact us through our Contact page. We may need to verify your identity before acting, and we will reply within 30 days.
If you are not satisfied with our answer, you may have the right to complain to the data protection authority where you live.
9. How we protect your data
- All connections to the site, our database and file storage are encrypted (HTTPS/TLS), and data is encrypted at rest by our hosting providers.
- Book files, receipts and support attachments are stored privately and are only available through short-lived, personal links after we check that you are entitled to them.
- Customer sign-in uses one-time codes instead of passwords; sign-in attempts and codes are rate-limited and expire quickly.
- IP addresses in our logs are stored only as one-way hashes.
- Staff access is limited by role, staff accounts use separate credentials, and staff actions on orders, payments, users and content are recorded in an audit log.
No system is completely secure. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities where required.
10. Children
The Service is not directed at children under 16, and we do not knowingly collect personal data from them. Purchases require an adult account holder (see our Terms of Service). If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy when our Service or the law changes. The date at the top shows when it was last changed. If a change materially affects how we use your data, we will tell you by email or on the site before it takes effect.
12. Contact
[Legal entity name] [Registered address], Lebanon
For any privacy question or request, please use our Contact page.