Privacy

Your account: your email address, and when you sign in (with a link sent to it; there is no password).

What you acquire and give: the editions that are yours, what you paid, and, for a gift, the address it went to and what you wrote.

Your reading: your place, your bookmarks, and a log of the pages delivered to you. Each page carries a mark tied to your account; the log is what a page found outside the reading room is checked against.

Where a reading session begins, coarsely (a city, a country, a position rounded to about 11 km), to notice an account read from places no one could travel between.

Your letters to Corollaria; whether its letters reached you; what Corollaria does on your account, if it must, with who and why; and counts of requests with no reader in them.

The address a request comes from, briefly: to limit how often a sign-in letter, a code or a letter to Corollaria is asked for from one place.

To give you what you acquired and keep it yours (the contract); to keep an account to one reader, the pages in the reading room and Corollaria secure (its legitimate interest); and to keep the payment records the law requires.

No advertising, no analytics, nothing that follows you elsewhere, nothing sold.

Link, Stripe's checkout, sells your purchase as the merchant of record and handles its payment under its own privacy policy; your card goes to Link, never to Corollaria.

Vercel serves the site and gives the coarse place a connection comes from; Neon keeps the database; Cloudflare keeps the volumes; Resend carries the letters; Cloudflare also receives mail written to Corollaria by email and passes it to Corollaria's own mailbox. Some work in the United States, under the safeguards the law requires for that transfer. All of it travels encrypted and is stored encrypted, and only those who run Corollaria can reach it.

Cookies that keep you signed in and bind a sign-in link to the browser that asked for it; your language, theme and time zone; and, on your device, your place and preferences. All are needed for the site to work and none tracks you, so none asks for consent.

Your account and what belongs to it, while the account exists. Where sessions began, ninety days. The address a request came from, two days at most. Whether a letter reached you, and counts of requests, thirty days (for a receipt, as long as its purchase). Payment records, and what Corollaria did on an account, as long as the law and Corollaria's own accounts require. Letters, as long as answering them needs.

To see, correct, take a copy of, restrict or delete what Corollaria keeps about you (except the payment records the law requires), or to object to a use of it: write to contact@corollaria.com. In the EU and the United Kingdom you may also complain to your data protection authority.

Corollaria is not for children under sixteen.