Privacy Policy

1. Information we collect

The Service collects the following information.

• Google account information: the email address, display name and profile image URL that Google provides when you sign in, and the user identifier that Firebase Authentication assigns
• Uploaded content: the PDF file itself, the original file name, file size, page count, the size of the first page, the title, and the automatically generated thumbnail image
• Sharing information: the email addresses you specify to share with, the Users you share with, and whether share links are issued or disabled
• User settings: settings such as the sort order of your bookshelf
• Plan and payment information: your current plan, the customer and subscription identifiers assigned by our payment service provider (Stripe), the date you returned to the free plan, and which books you chose to keep when downgrading. Payment details such as credit card numbers are collected and stored by Stripe; the Operator neither collects nor stores them
• Messages you send us: the name, email address and message you enter in the contact form, and your user identifier if you send it while signed in
• Access logs and error logs: to investigate problems and prevent abuse, the infrastructure provider (Cloudflare) records the time of requests, URLs, IP addresses, browser types and similar information. Application logs that the Operator produces do not include email addresses or authentication identifiers

2. How we use information

• Providing the Service (signing in, the bookshelf, reading, sharing and so on)
• Specifying who to share with, and accepting invitations
• Responding to inquiries
• Investigating problems, ensuring security and preventing abuse
• Responding to conduct that violates the Terms of Service
• Improving the Service and considering new features
• Managing the contract, billing, cancellation and support for the paid plan (Pro plan)

The Operator does not use the information it collects for any purpose other than the above. It does not use it for advertising.

3. Legal bases for processing (EU, EEA and UK users)

If the GDPR or the UK GDPR applies to you, we process your personal data on the following legal bases.

• Performance of a contract (Article 6(1)(b)): providing the Service you asked for, including sign-in, the bookshelf, reading, sharing, and the Pro plan subscription
• Legitimate interests (Article 6(1)(f)): keeping the Service secure, investigating problems, preventing abuse, and responding to inquiries. We do this only where your rights and interests do not override ours
• Consent (Article 6(1)(a)): analytics cookies (Google Analytics). You can withdraw consent at any time, as described below
• Legal obligation (Article 6(1)(c)): keeping billing and tax records where the law requires it

We do not make decisions about you based solely on automated processing that has legal or similarly significant effects.

4. Cookies and similar technologies

To keep you signed in, the Service uses the following technologies. All of them are necessary to provide the Service.

• Sign-in cookie (__session): issued with the HttpOnly and Secure attributes, and identifies the signed-in User
• Browser storage (such as IndexedDB): used by Firebase Authentication to refresh sign-in credentials
• Browser storage (localStorage): used to save your display theme and your choice about cookies

To understand how the Service is used and to improve it, the Service uses Google Analytics, an analytics service from Google LLC. Google Analytics uses cookies and similar technologies to collect information such as the kinds of screens you view and your environment (browser, device and approximate region). The collected information is managed under Google's privacy policy. We do not send the contents of books, file names or share links, and we do not link the data to your name or email address. We do not use advertising cookies.

We use Google Analytics only if you select "Accept" on the notice shown when you first open the Service. If you select "Decline", or until you make a choice, Google Analytics is not loaded and no information is sent. Your choice is saved in your browser (localStorage), and you can change it at any time with "Cookie settings" at the bottom of the page. If you withdraw consent, the Google Analytics cookies are deleted and measurement stops.

If you disable cookies in your browser settings, you will not be able to sign in. You can also stop collection by Google Analytics by using the "Google Analytics Opt-out Browser Add-on" provided by Google.

5. Sharing with third parties and service providers

Except where required by law, the Operator does not provide personal information to third parties without your consent. However, to operate the Service, it entrusts the handling of information to the services of the following companies.

• Google LLC (Firebase Authentication / Google sign-in): authentication, and obtaining your email address and display name
• Cloudflare, Inc. (Workers / D1 / R2 / Turnstile): running the application, the database, storing PDFs and thumbnails, and bot protection for the contact form
• Slack Technologies, LLC (Slack): to let the Operator know an inquiry has arrived, the contents of the inquiry (name, email address and message) are sent to the Operator's Slack
• Stripe, Inc. (Stripe Checkout / Customer Portal): subscribing to the Pro plan, payments, and managing the subscription. For payment, we pass your email address and display name to Stripe

When you use sharing, the Users you share with and anyone who has the link can read the shared book. Users you share with are given permission to view your book.

International transfers. The Operator is based in Japan, and the companies above may process data outside your country, including in Japan and the United States. If you are in the EU, the EEA or the UK, your personal data is therefore transferred outside those areas. Japan has been recognized by the European Commission as providing an adequate level of data protection. For transfers to the providers above, we rely on the safeguards they publish, such as the EU–U.S. Data Privacy Framework and standard contractual clauses, and we choose services on the premise that they handle data in line with their published privacy and security policies.

6. Retention and deletion

1. When a User deletes a book, its PDF and thumbnail are deleted immediately.
2. When a User deletes their account from the settings screen, the account information, all books and the sharing settings are deleted. We do not use soft deletion or keep a retention period.
3. However, because of how the database's recovery feature (Cloudflare D1) works, the database contents from before deletion remain in backups for up to 30 days. After that period, the backups are also lost. We do not keep backups of PDF files or images.
4. On the free plan, books more than 30 days after upload become unreadable, and are automatically deleted, including their PDFs and thumbnails, 7 days after that (7 days after you return to the free plan, if you came back from the Pro plan).
5. Records about the Pro plan subscription are kept by Stripe in accordance with the law. When you delete your account, the Operator cancels the subscription and deletes the customer identifier and similar data in the Operator's database.
6. Data from uploads that did not finish is automatically deleted after a set time (24 hours).
7. Invitations to email addresses that were specified for sharing but have not registered yet expire after 7 days and are deleted.
8. Messages sent through the contact form are kept in the Operator's database for as long as needed to respond. If you delete your account, the record of your inquiry remains, but it is no longer linked to you. If you want it deleted, please contact us at the address below.

7. Security

The Operator protects information using measures such as encrypted communication (HTTPS), private storage, authorization checks when viewing, and access restrictions. However, complete security cannot be guaranteed.

8. Your rights

You can request disclosure, correction, suspension of use and deletion of your personal information. For actions you can take yourself from the bookshelf or settings screens (deleting books, changing your Google account, deleting your account), please use those. For other requests, contact us at the address below. We will verify your identity and respond in accordance with the law.

If the GDPR or the UK GDPR applies to you, you also have the right to:

• access your personal data and receive a copy of it
• have inaccurate data corrected
• have your data erased
• restrict the processing of your data
• data portability, that is, receive the data you provided to us in a structured, commonly used, machine-readable format
• object to processing based on legitimate interests
• withdraw consent at any time (this does not affect processing that was lawful before you withdrew it)
• lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you believe a violation took place

To exercise these rights, contact us at contact@riffle.page. We will respond without undue delay, and within one month where the GDPR applies.

9. Use by minors

Minors must obtain the consent of a parent or guardian before using the Service.

10. Changes to this policy

The Operator will change this policy as needed. The changed policy takes effect when it is posted on the Service. Important changes will be announced on the Service.

11. Contact

Riffle Operations Team
Email: contact@riffle.page