Privacy Policy
Emberpage is a reading app. It needs an account so your library, your unlocked chapters and your place in a book survive a reinstall. That is the whole reason any data is kept, and this page lists every piece of it.
1. Who is responsible
Emberpage ("we", "us") operates the Emberpage iOS application and this website. We are the data controller for the information described below. You can reach us at support@emberpage.pro.
2. What we collect
| Data | When it is collected | Why |
|---|---|---|
| Device identifier | First launch | Apple's per-vendor device ID (identifierForVendor) is how an anonymous
account is recognised on the next launch. It is not the advertising identifier and it
resets when you delete the app. |
| Account ID | First launch | A number we assign. Every other record below is attached to it. |
| Email address | Only if you create a full account | Signing in on a second device, and password recovery. Anonymous readers never supply one. |
| Password | Only if you create a full account | Stored solely as a salted scrypt hash. We cannot read it back. |
| Display name | Optional, from the profile screen | Shown to you on your own profile. It is not public. |
| Library, bookmarks, reading position | As you read | So a book resumes at the right chapter and scroll position on any device you sign in on. |
| Coin balance and ledger | On purchase, reward or chapter unlock | Coins are spendable value, so every credit and debit is recorded. Without the ledger a balance could not be audited or restored. |
| Purchase records | On an App Store purchase | The Apple transaction identifier, the product identifier and whether it came from production or sandbox. This is what stops one receipt being redeemed twice, and what lets us honour a subscription you already paid for. |
| Server logs | On every request | IP address, timestamp, requested path and response status, kept for up to 30 days for security and debugging, then discarded. |
3. What we do not do
- No tracking. Emberpage does not use the advertising identifier, does not ask for App Tracking Transparency permission, and does not link your activity to data from other apps or websites.
- No third-party analytics or advertising SDKs. The app ships with no analytics framework and no ad network. Nothing is loaded from a third-party server while you read.
- No sale or sharing of personal data. We do not sell your data, do not share it with data brokers, and do not use it for advertising — ours or anyone else's.
- No payment details. Purchases run entirely through Apple. We never see your card number, billing address or Apple Account email.
4. Where data is stored
All account data lives on a single server we operate in Finland (European Union). It is not replicated to other regions and is not handed to a third-party processor. Traffic between the app and the server is encrypted with TLS.
Emberpage is operated from Ukraine, so if you are reading from the United States or elsewhere, your data is transferred to and stored in the European Union and accessed from Ukraine. By using the app you consent to that transfer. The safeguards are the ones described on this page: a single server, no third-party processors, no onward sharing.
Apple processes your payment and returns us a cryptographically signed receipt. Apple's handling of that transaction is covered by Apple's Privacy Policy, not this one.
5. How long we keep it
Account data is kept for as long as the account exists. Server logs are kept for up to 30 days. When you delete your account, everything in section 2 is erased immediately, with one deliberate exception described next.
6. Deleting your account
Open Profile → Delete Account in the app and confirm. This is immediate and permanent: your email, password hash, display name, device identifier, library, bookmarks, reading positions, coin balance, coin ledger and unlocked chapters are deleted from our database. There is no recovery period and no way for us to restore them.
One thing survives deletion. The identifiers of App Store transactions that have already been redeemed are kept, detached from you — the transaction identifier, the product identifier and the date, with no link to any account, email or device. This is what prevents the same purchase receipt from being redeemed again for free coins on a new account. It contains nothing that identifies you personally.
If you cannot open the app, write to support@emberpage.pro from the email address on the account and we will delete it for you.
7. Your rights
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access your data, correct it, have it erased, restrict or object to its processing, and receive a copy in a portable format. The delete function above covers erasure; for anything else write to support@emberpage.pro and we will respond within 30 days. You also have the right to complain to your national data protection authority.
Our legal basis is performance of a contract — we cannot keep your library, unlocked chapters or paid balance without storing them — together with our legitimate interest in keeping the service secure and preventing purchase fraud.
8. California and other US state privacy rights
If you live in California, the CCPA/CPRA gives you the right to know what personal information we have collected about you and why, to have it deleted, to have inaccurate information corrected, and to receive a copy of it. Comparable rights exist under the privacy laws of Colorado, Connecticut, Texas, Virginia and several other states. The delete function in the app covers erasure; for anything else, write to support@emberpage.pro.
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by California law. We have not done so in the past twelve months, and there is therefore no "Do Not Sell or Share My Personal Information" process to opt out of. We collect no sensitive personal information within the meaning of the CPRA. We will never deny service, charge a different price, or degrade the app because you exercised one of these rights.
The categories we collect are listed in section 2 above; in CCPA terms they are identifiers, commercial information (purchase and coin records), and internet or other electronic network activity (which chapters you read). We keep them only for as long as section 5 describes.
9. Children
Emberpage is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.
10. Changes to this policy
If this policy changes materially we will update the effective date above and, where the change affects data already collected, note it in the app. Continuing to use Emberpage after a change means you accept the updated policy.
11. Contact
Questions, requests or complaints: support@emberpage.pro.