Last updated: April 2025
Verhaal is operated by Dutch.Software. This policy explains what personal data we collect, why we collect it, and how you can control it. If you have questions, contact us at [email protected].
Account data: username and email address, collected when you register.
Library data: books you add, reading statuses, page progress, start and finish dates.
Review data: ratings, review titles and text, and whether you choose to make them public.
Profile data: optional bio and avatar image you upload.
KOReader sync: if you enable KOSync, we store reading progress data sent by your device (document title, percentage read, last device name).
Goodreads import: if you upload a Goodreads CSV export, we process it to import your books and reviews. The original file is not retained after import.
Technical data: standard server logs (IP address, browser type, pages visited) retained for up to 30 days for security and debugging.
We use your data solely to provide and improve the Verhaal service: displaying your library, enabling reviews, syncing reading progress, and sending transactional emails (e.g. password reset). We do not use your data for advertising or sell it to third parties.
Reviews and profiles are private by default. You can choose to make your profile and individual reviews publicly visible. Public reviews and public profiles are accessible to anyone — including non-logged-in visitors — and may be indexed by search engines.
We do not sell or share your personal data with third parties, except where strictly necessary to operate the service (e.g. our hosting provider). All processors are contractually bound to protect your data.
Your data is stored on servers located in the European Union (Hetzner, Germany). No personal data is transferred outside the EU/EEA.
Your data is retained for as long as your account is active. You can delete your account at any time by contacting us at [email protected]. Your personal data will be deleted within 30 days.
Under GDPR you have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email [email protected]. We will respond within 30 days.
Verhaal uses a single session cookie to keep you logged in. No tracking or advertising cookies are used.
Passwords are stored as one-way hashes and are never readable by us. All traffic is served over HTTPS. We apply reasonable technical and organisational measures to protect your data.
We may update this policy from time to time. Significant changes will be communicated by email. Continued use of Verhaal after changes are posted constitutes acceptance of the revised policy.