Information SideNote handles
- Account and profile information, including email, username, optional display name, and hashed authentication records.
- Books, reading status, wishlist choices, shelves, ratings, likes, onboarding choices, notes, and responses.
- Follows, blocks, confidential reports, support messages, account-linked activity events, authentication IP addresses and device details, and security events.
Visibility and use
Ratings are public reading activity. Public profiles, public shelves, follows, and public notes may be visible to other readers. Books marked Reading, Read, or Want to read appear on public bookshelves. Notes use the audience selected in the product. Reports remain confidential.
SideNote uses reading signals to operate recommendations, not to sell personal information or target third-party advertising.
Providers and analytics
SideNote currently uses Supabase for managed PostgreSQL, Replit for hosting and current object storage, and Resend for transactional email. New catalog lookups use Open Library; older records may include Google Books material. Loading a cover sends ordinary request information, including your IP address, to its host. GitHub Actions stores configured encrypted backup artifacts.
Retention, export, and deletion
Delete an account from Settings → Account → Delete account. Confirmed deletion revokes the session and removes SideNote-owned account data. Configured encrypted GitHub backup artifacts expire after 14 days. Provider backups, logs, and historical exports have separate retention still being reconciled. Limited safety or legal records may remain when reasonably necessary.
Until self-service export is available, request access or export help at privacy@joinsidenote.com.