Privacy Policy

Effective May 1, 2026 · Updated June 2026

NovelCodex ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit novelcodex.org(the "Site"). Please read this policy carefully. By using the Site, you consent to the practices described here.

1. Information We Collect

Account data: When you create an account, we collect your email address and a hashed password. We do not store plaintext passwords.

Usage data: We may collect information about how you interact with the Site, including pages visited, novels bookmarked, and chat queries submitted. Queries are processed to generate AI responses and are not sold to third parties.

Automatically collected data: Server logs may capture your IP address, browser type, and referring URL for security and analytics purposes. This data is retained for up to 90 days.

Cookies & local storage: We use browser local storage to remember your bookmarked novels and recently visited pages. No cross-site tracking cookies are set.

2. How We Use Your Information

We use collected information to: operate and improve the Site; respond to your requests; send transactional emails (e.g., account confirmation); detect and prevent fraud; and comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Email Communications

If you provide your email address, we may send you transactional messages (account creation, password reset). We will only send marketing emails if you explicitly opt in. You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or contacting us at [email protected]. We comply with the CAN-SPAM Act and GDPR email consent requirements.

4. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out: We do not sell personal information. You do not need to opt out of a sale.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at [email protected] or use the feedback widget on the Site. We will respond within 45 days.

5. Data Retention

Account data is retained until you delete your account. Chat history is session-based and not persistently stored on our servers. Server logs are retained for up to 90 days.

6. Third-Party Services

We use the following third-party services that may process your data:

  • Supabase — database and authentication (EU/US data centers). See Supabase Privacy Policy.
  • OpenAI— AI text generation for chat responses. Queries are sent to OpenAI's API. See OpenAI Privacy Policy.
  • Stripe — payment processing for token purchases and subscriptions. We never store your full card details. See Stripe Privacy Policy.
  • Google Analytics — anonymized traffic and usage analytics. See Google Privacy Policy.
  • Third-party ad networks (currently Adsterra; Google AdSense if enabled) — advertising. See the cookies section below.

7. Cookies & Advertising

We use cookies and similar technologies for three purposes:

  • Strictly necessary — a secure, httpOnly session cookie keeps you signed in. This is required for the Site to function and cannot be disabled.
  • Analytics — Google Analytics cookies (e.g. _ga) help us understand traffic and improve the Site. Only set after you accept cookies.
  • Advertising— Google AdSense and its partners (including Google's DoubleClick) use cookies to serve and measure ads. Google may use the advertising cookie to serve ads based on your visits to this and other sites.

When you first visit, a cookie banner lets you Accept or Decline non-essential cookies. We use Google Consent Mode — if you decline, analytics and advertising cookies are not set, and ads (if shown) are non-personalized. You can change your choice any time by clearing your browser's site data. You may also opt out of personalized Google advertising at Google Ads Settings or aboutads.info.

Subscribers and users who purchase the ad-free upgrade do not see ads, and no advertising cookies are set for them.

8. Security

We implement industry-standard security measures including HTTPS, rate limiting, input validation, and httpOnly session cookies. No system is 100% secure; please use a strong, unique password for your account.

9. Children's Privacy

The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes by email or by a prominent notice on the Site. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact Us

Privacy inquiries: [email protected]
DMCA / content removal: [email protected]