Privacy
Draft for owner review
This page is a draft prepared for the owner of BookofJs to review before the site is published. It describes what the site does today.
What we collect
When you sign in with Google, we receive your account identifier, email address and name. The entries you save (strain, type, size, strength, rating, amount, date and time, and, for subscribers, notes, tags, colours, styles and in-depth review scores) are stored in the site's database and tied to your account. Database access rules limit ordinary users to their own entries. An entry you add without signing in is kept on that device, in your browser, until you sign in and import it into your account. If you email us, we use your address to reply.
Friends and leaderboard (subscribers)
Subscribers choose a unique username (and can change it later), send and accept friend requests, and remove friends. Your username is the only identity other members see: it is used for friend requests, co-op and the leaderboard, and is visible to subscribers who search for that exact username and to your friends. We never show other members your email, Google sign-in name or photo, and search only matches usernames. Please do not put your real name or other identifying details in your username; this is pseudonymous, not completely anonymous, and friends may still recognise you from what you share. The leaderboard is off by default. If you turn on "Join the leaderboard", friends who have also joined can see your number of entries and grams logged for the period shown, each unit shown separately. They never see strain, type, notes, ratings or in-depth review scores. Turn it off at any time to stop sharing, or use "Remove me from friends and leaderboard" to delete your username and friendships (your journal entries stay). Friendship, consent and an active subscription are checked by our server and database. We keep a copy of each entry's date, time and amount to build the leaderboard.
Co-op sharing (subscribers)
Co-op is a subscriber option for people who are accepted friends. It is off by default and is chosen separately for each friend: sharing with one friend shares nothing with anyone else. Your counts and dates are visible to a friend only when you have turned sharing on for them and they have turned it on for you. Then each of you sees the other's dates, daily number of entries and consecutive-day count. Detailed journal entries, strain, notes, ratings and in-depth review scores are never shown. You can stop sharing with a friend at any time and their access ends immediately; removing a friend also ends it. Your own consecutive-day count is worked out from your own dated entries and shown only to you unless you share it through co-op. The server and database check friendship, both consents and an active subscription on every read.
Sharing a review
Every review is private by default. Only when you press Share and then Create share link do we make a long, random link to that one review. Anyone who has the link can read that review's strain, type, size, strength, rating, amount, date and time, and any effects, mood, colour, pattern and notes on it. The link never includes your name, email, account, photo, tags, friends, username, leaderboard numbers or your other reviews. You copy and send the link yourself; we never post or send it for you. Choose Stop sharing to switch the link off at once, and it stops working for everyone. Deleting a review also removes its link.
Free monthly allowance
To apply the free allowance of 15 new entries per UTC calendar month, we keep a record of when each entry was first created (an entry id and a timestamp). Deleting an entry does not remove that record, so deleting does not reset the count.
Payments
Subscriptions are processed by our payment provider's checkout (Stripe). We do not see or store your card number. We keep a record of whether your subscription is active and the date it is paid through.
How it is used
Your entries are used to show your journal, calendar, totals and comparisons to you. We use your email for account sign-in, to send subscription-related messages, and to answer your requests.
Your choices
You can delete any entry yourself in the app. For questions or to ask about your data, email hello@bookofjs.online.
Service providers
The site relies on hosted services for sign-in, database storage, email and payments, which process data on our behalf. No system is perfectly secure.