Privacy Policy

1. Who takes care of your data

Libtro is operated by oth0mx. For any matter on privacy and data protection, contact us at [email protected]. We reply within 72 hours.

2. Data we process

• Account: email, public nickname, password (stored only as an Argon2id hash), role, theme and notice preferences, creation date and last sign-in, and the date and version of the Terms you accepted.
• System emails: we use your email address to send the sign-up confirmation, password recovery, email change confirmation and security notices (such as a changed password or a deletion request). We keep the date on which you confirmed your email and a technical record of the sending (address, type and date).
• Profile: profile photo (optional), converted into a small image.
• Files and tasks: the books you upload (EPUB, PDF and DOCX), the generated results (conversions, translations and audiobooks) and the task log (type, status, dates and title). The content of the books is used only to do what you asked.
• Kindle: your Kindle email and the SMTP settings you register. The SMTP password is stored encrypted.
• Community: feedback, comments and team replies, which are public to anyone who accesses the Community.
• Private messages: conversations started by the team, visible only to the participants and, with access logging, to the owner and administrators.
• Conversations between users: they only start after the other person accepts a short request. We keep the request, the messages, and the blocks and mutes you make. Messages are visible only to the two participants. Moderation does not read conversations: it only sees the excerpt of the latest messages that someone reported. Reports and excerpts are kept for 180 days and access to them is logged. Conversations with no activity for 365 days are deleted, and when you delete your account your messages and blocks are also deleted. Moderators and administrators may mute a person's chat for abuse.
• Book requests: title, author, language and notes of the books you request, the status, the team's reply and, when there is one, the file sent, which is kept in My files like your own uploads. Visible to you and to administrators. Closed requests are deleted after 365 days (the file sent stays in your library until you delete it), and everything is removed when the account is deleted.
• Sessions: when you sign in, we keep an encrypted identifier (hash) of the session and the date it was last used. Sessions with no activity for 30 days are ended automatically for security, and you can end the other sessions at any time under Security.
• Security and operation: sessions (hash of the identifier and validity), a log of administrative actions (who, what and when, without message content), requests refused due to usage limits, and login attempts. IP addresses are used to limit abuse; for visitors without an account we keep only a hash of the IP.
• Prestige: a score and a level (from "Page Flipper" to "Shelf Legend") calculated only from counts of your usage (completed operations, time since you joined and participation in the Community), never from the content of your books. The level appears in the color and badge of your @ handle. You can hide the prestige on your @ handles; the points are visible only to you and the team. The team may adjust the score, and each adjustment is recorded with its reason.
• Your own usage metrics: counts of operations (requested, started, completed or failed) by type and day, without book text, audio, passwords, tokens, IP or message content.
• Notifications: your choice of notices (sound and system notices) and, if you enable it, the browser's technical subscription to receive task notices.

3. What we use it for and on which legal basis

• Creating your account and providing the service (conversions, translations, narrations and sending to Kindle): performance of the service you request (LGPD (Brazilian General Data Protection Law), art. 7, V).
• Showing ads that fund the free service: legitimate interest of Libtro (art. 7, IX).
• Security, prevention of abuse and fraud, administrative audit and essential operating metrics: legitimate interest (art. 7, IX).
• System notifications: your consent (art. 7, I), which you may withdraw at any time.
• Keeping access and action records for the period required by law (Internet Civil Framework, Marco Civil da Internet, art. 15) and for the regular exercise of rights: legal obligation and regular exercise of rights (art. 7, II and VI).

4. How long we keep it

• Generated results: removed 7 days after completion. Uploaded files: removed after 30 days.
• Sessions: 24 hours (regular session) or up to 30 days with "Keep me signed in". You can end sessions under Settings › Security.
• Visitors without an account: the temporary account and files are deleted after 24 hours.
• Access records and administrative action records: 6 months, the minimum period provided by law, and then deleted.
• System emails: confirmation and recovery links are valid from 30 minutes to 24 hours and can be used only once. The text of the email is deleted from our server as soon as it is sent, and the technical record of the sending is deleted after 7 days.
• Record of the account deletion request (date and status): 6 months after completion, and then deleted.
• Requests refused due to limits: 90 days. Usage metrics: 400 days; when the account is deleted, they keep only an internal number that no longer matches anyone.
• Account, profile, private messages and settings: while the account exists; they are deleted or anonymized on deletion (item 7).

5. Who we share it with

Files are processed on Libtro's own server (Calibre/LibreOffice, local LibreTranslate and local Piper/RHVoice voices). The content of the books is not sent to third-party services, except what you send to your Kindle through the SMTP server you configured. We also use:

• Cloudflare, Inc.: access to the site goes through Cloudflare's network, which handles delivery and performance (caching, compression and optimization), the firewall, the anti-bot verification Turnstile, the team's access control and the site's traffic and performance analytics. It processes the IP address and technical data of each request (such as country, device and browser type, pages accessed and response time), which may involve international transfer of data, including to the United States (LGPD, art. 33). These analytics are aggregated, run on Cloudflare's server, and do not create individual profiles or use cookies. Emails sent to [email protected] also pass through Cloudflare before reaching the person in charge. Every day we also keep an encrypted backup of the database and the service keys in Cloudflare's R2 storage, which may involve international transfer. The backup is encrypted before it leaves the server, only the person in charge holds the key to open it, and the 30 most recent copies are kept. The files you upload and the results generated are not included in these backups.
• Resend, Inc.: sends the system emails described in item 2. It receives your email address and the content of the message, which may involve international transfer of data, including to the United States (LGPD, art. 33). We do not use Resend for advertising or to track whether you opened or clicked the messages.
• Google (AdSense): Libtro shows ads from Google AdSense, which help keep the service free. When you use the site, your browser connects to Google's servers, which receive technical connection data, such as the IP address, and may use cookies and identifiers to show and measure ads, including personalized ads. This may involve international transfer of data, including to the United States (LGPD, art. 33). You can control ad personalization by Google at adssettings.google.com, learn more at policies.google.com/technologies/ads, and block third-party cookies in your browser settings.
• Browser notification services (Google, Mozilla and Apple): only if you enable notices with the browser closed. They deliver a generic message, without file names.

We do not sell data. Google ads are part of Libtro's free operation and do not require a separate cookie consent. If this changes, we will update this page beforehand.

6. Security

Passwords with Argon2id, encrypted SMTP password, revocable sessions, CSRF protection, usage limits, anti-bot verification, HTTPS-only connection, isolation between accounts and validation of uploaded files. No system is entirely immune: if a relevant incident occurs, we will notify the people affected and the National Data Protection Authority (ANPD), where applicable.

7. Your rights

You may request confirmation of processing, access, correction, anonymization, portability, information about sharing, withdrawal of consent and deletion of your account. See Data subject rights. Deletion can be requested in Settings › Account, and other requests at [email protected], with a reply within 72 hours.

When you delete your account, the profile, photo, files, tasks, Kindle settings, sessions and private messages are deleted. Public feedback and comments remain without identification ("Deleted account"), so that the history of the Community is not broken. Minimum security records and those of the deletion request itself are kept for the periods in item 4.

8. Minors

Libtro is intended for people aged 18 or over. We do not intentionally collect data from minors. If we identify an account of a person under 18, it will be removed.

9. Cookies, notifications and analytics

• Essential cookies: session (sign-in), CSRF protection and theme preference. They are required for the site to work. Cloudflare may set technical security cookies during anti-bot verification and attack protection.
• Advertising cookies: Google AdSense may set cookies and use identifiers in your browser to show and measure ads. They belong to Google and follow its policy, described in item 5.
• Notifications: the sound alert is local to the browser. System notices are enabled only by you, after an explanation and the browser's permission request, and serve exclusively to tell you that your tasks and queue have finished.
• Analytics: we use our own metrics described above and Cloudflare's traffic and performance analytics (item 5), which are aggregated and do not use cookies nor identify you individually. There are no third-party trackers, and you may ask for more information at [email protected].
• Cookie notice: we show an informational notice with the "Got it" button, and we store in your browser only that you dismissed it. In addition, after sign-in, we ask you to accept these Terms and this Policy whenever they change, and the date and version of the acceptance are recorded.

10. Changes

Material changes will be published on this page, with the new date at the top.