Who we are
This dashboard is run by Karen Nappa (karennappa.com). We are responsible for the personal data that is processed in this dashboard. If you have a question about your data, you can reach us at author@karennappa.com.
What data we collect and why
Your account
- Name and email address, so you can log in, so we can send you login codes and so an administrator can recognise you when approving your account.
- Password, stored only as a bcrypt hash. We can never see or recover your actual password.
- Login codes, stored only as a hash. A code works for 10 minutes and is removed as soon as it is used or a new one is sent.
- Account details such as when you registered, when you last logged in, whether your email address is confirmed and whether your account is approved.
Your work in the dashboard
- History of the books and manuscripts you analysed, including the tags you edited, so you can open them again later. Only you can see your own history.
- Saved preset tropes that you add to your own preset list. Only you see and use them.
- Usage activity, meaning which tools you open and use and at what time. We use this only to suggest what you might want to do next on your dashboard and to show your own statistics. It is never used for advertising.
- Manuscripts you upload are read to determine their word count, chapters, genre and tropes. The file itself is not kept after it has been analysed. The results are saved in your history.
- Book information read from public Amazon product pages is saved in a shared library so the same book never has to be fetched twice. This contains no personal data.
Legal basis
We process your account data and your work in the dashboard because it is necessary to provide the dashboard to you (performance of a contract). We process usage activity for suggestions based on our legitimate interest in making the dashboard easier to use. You can object to this at any time.
Cookies
We use one cookie that is strictly necessary: a session cookie that keeps you logged in and protects forms against misuse. We also remember that you have seen the cookie notice. We do not use analytics, tracking or advertising cookies, so no consent is needed for these cookies.
The affiliate links that the Book Tagger creates point to Amazon. When you open one, Amazon may place its own cookies under its own privacy policy.
Who we share data with
We never sell your data. We only use these service providers to run the dashboard:
- Namecheap hosts the dashboard and the database, and delivers our emails (Private Email).
- Anthropic (Claude) analyses book descriptions and manuscript text when AI mode is switched on. The text is sent to Anthropic for this analysis only. Your name and email address are not sent.
- Google Fonts and the Tailwind CSS content network deliver fonts and styling to your browser. Your browser connects to them directly, which means they can see your IP address.
Some of these providers are based in or use servers in the United States. Where that is the case, the transfer is covered by the EU-US Data Privacy Framework or by standard contractual clauses.
How long we keep your data
- Account data, history and usage activity: for as long as your account exists. When you anonymize your account on your profile page, your name, email address, password, history and activity are removed straight away.
- Login codes: at most 10 minutes, or until they are used.
- Server logs kept by our host: according to the host's own retention period, usually a few weeks.
Security
Passwords and login codes are stored as hashes, every login needs a code sent to your email address, the connection to the dashboard is encrypted and only approved accounts can use the dashboard.
Your rights
You have the right to see, correct or delete your personal data, to receive a copy of it, to restrict its use and to object to its use. Most of this you can do yourself on your profile page:
- change your name, email address and password;
- download all data we store about you as a file;
- anonymize your account, which removes your personal data for good.
For anything else, send your request to author@karennappa.com and we will respond within one month.
If you are not happy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own country.
Changes
We may update this statement when the dashboard changes. The date at the top shows when it was last updated. For important changes we will let you know by email.