Reading a book here records almost nothing. Sending an inquiry records what you type.

1.Effective date

This policy takes effect on September 28, 2026, and was last updated on that date. It covers novelvora.us and every page on it, including the reading pages of our public domain books online, the inquiry form and the support chat.

2.Who runs this site

The site is run by Novelvora, trading at novelvora.us, from 70 Oak Lane, Floor 2, Austin, Texas 82798, United States. Novelvora decides what personal data is collected here and why, which makes it the controller of that data. Three people work here. The correspondent who answers inquiries is also the person who handles privacy requests.

3.What we collect

Reading a book does not require an account. There are no accounts, no passwords, no payments and no card numbers anywhere on this site, because nothing is sold here. What we do receive falls into five groups.

• The inquiry form. Your name, phone, email, the city, school or library you give as an address, the kind of inquiry, your message, the book or pack you ask about, and the consent tick. With it, automatically: your IP address, your browser's user-agent string, the page you came from, the moment the form was shown to you and the moment you sent it.
• The support chat. The messages you and we write, plus a name, phone or email if you choose to give one. A token is kept in your browser's local storage so you can return to the same conversation.
• Server and access logs. IP address, requested page, time, status code and user-agent, written by the web server for every request.
• Your consent choice. Stored in your browser under the key site_consent_v2. Nothing else on this site stores a choice.
• Advertising click identifiers. When you arrive from a paid ad, the link carries a gclid, msclkid or fbclid value. Where you allow storage, the relevant platform's tag reads it and sets its own cookie. Details are in the cookie policy.

4.What it is used for

• Inquiry form data: to answer you, write a quote for a reading-group pack or large-print set, and deliver it if you accept. The timing and IP fields are there to filter automated spam.
• Chat data: to hold a conversation with you across visits.
• Logs: to keep the site running, trace faults and block abuse.
• Consent choice: to remember your answer so the banner does not reappear on every page.
• Click identifiers and ad cookies: to measure which ads bring readers who go on to send an inquiry, so we stop paying for the ones that do not.

We do not sell your data, rent our inquiry list, or send newsletters you did not ask for.

5.Legal bases

For visitors covered by European law, each purpose rests on one stated basis.

6.Advertising platforms

We buy ads. Google Ads, Microsoft Advertising and Meta Ads send paid traffic to this site today, mostly to book pages and the reading-groups page. Each platform adds its own click identifier to the link you follow:

• Google Ads adds gclid.
• Microsoft Advertising adds msclkid.
• Meta Ads adds fbclid, where a campaign runs there.

The identifier arrives in the address bar whether or not you consent. Whether it is stored or sent back to the platform depends on your choice, as the next section explains.

7.Consent Mode v2

The site runs Google Consent Mode v2. Before you choose, four signals are set to denied: ad_storage, ad_user_data, ad_personalization and analytics_storage. While they are denied, no advertising or analytics cookie is written and no click is tied to you.

Press Allow and the four signals switch to granted. Press Decline, or withdraw later through Cookie settings in the footer, and they are set back to denied at once. The same denied state applies to the Microsoft and Meta tags.

8.Who receives data

• Google Ireland Ltd and Google LLC, for Google Ads. Receives the gclid and the consent signals.
• Microsoft Ireland Operations Ltd, for Microsoft Advertising. Receives the msclkid. Its handling is described in the Microsoft privacy statement at privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd, for Meta Ads, where a campaign runs there. Receives the fbclid.
• Our hosting provider, which serves the site, writes the server logs and stores the inquiry database.
• Our mail provider, which carries the notification of each inquiry to our inbox and our replies back to you.

No one else receives it. The ad platforms only receive anything beyond the bare click after you allow storage.

9.Transfers abroad

Novelvora is in the United States and stores data here. If you write from Europe or the UK, your data travels to the United States. Those transfers rest on the European Commission's standard contractual clauses and, where the recipient is certified, the EU-US Data Privacy Framework. The ad platforms named above move data between their Irish and US entities under their own clauses.

10.How long we keep it

After those periods the records are deleted, not archived. Ad platform cookies follow the lifetimes listed in the cookie policy.

11.Security

Every page is served over HTTPS. The inquiry database sits outside the public web folder and is reached only through a password-protected operator panel used by the three of us. Form fields are validated and escaped on the server. Honeypot fields and timing checks turn away bots. We hold no payment data, which removes the most valuable target a small site can have.

12.GDPR rights

If you reach this site from the European Economic Area or the UK, the GDPR gives you these rights over your data:

• access: a copy of what we hold;
• rectification: correcting what is wrong;
• erasure: deleting it;
• restriction: pausing its use while a dispute is settled;
• portability: receiving it in a machine-readable file;
• objection: to use based on legitimate interest;
• withdrawing consent at any time, without affecting what was done before.

13.US state rights

Residents of California have rights under the CCPA as amended by the CPRA: to know what is collected, to delete it, to correct it, to limit use of sensitive data, and to opt out of the sale or sharing of personal information. We do not sell personal information. Letting ad platforms measure a click can count as sharing under California law, so declining cookies, or sending a Global Privacy Control signal, is how you opt out of it. Residents of other states with privacy laws in force, including Colorado, Connecticut, Virginia, Utah and Texas, have similar rights and can use the same route. We will not treat you differently for using them.

14.Global Privacy Control

We honour Global Privacy Control. If your browser sends the Sec-GPC header and exposes the matching Global Privacy Control signal to the page, the site treats it as an opt-out of sale and sharing, keeps all four consent signals denied and does not show you the banner asking again.

15.Children

The books are for anyone, but the site is not directed at children under 13 and we do not knowingly take data from them. Class packs are arranged by the teacher or librarian, not by students. If a child has sent us something, write and we delete it.

16.Complaints

Please write to us first; most problems are fixed in one reply. You may also complain to your state Attorney General, and in California to the California Privacy Protection Agency. Visitors from Europe may complain to the data protection authority of the country where they live or work.

17.Making a request

Use the data request form, email [email protected], or write to Novelvora, 70 Oak Lane, Floor 2, Austin, Texas 82798, United States. Tell us the email you used, so we can find your records and confirm it is you. We answer within 14 days. It costs nothing.

18.Changes

When this policy changes, the new date goes at the top of this page and a line describing the change is added to this section. If a change adds a new recipient or a new purpose, the cookie banner is shown again so you can choose afresh.

19.Contact

A person reads every message. Email [email protected], call +1 (285) 555-7159, or post to 70 Oak Lane, Floor 2, Austin, Texas 82798, United States. Related pages: cookie policy, terms of use.