Privacy Policy

The data controller for this website is Curious Paper Books, reachable at the contact address below. This privacy policy applies to the website curiouspaperbooks.com and all its pages.

We collect personal data only when you actively provide it through one of the following actions on this website:

• Newsletter subscription, name and email address, provided voluntarily via the subscription form.
• Book submission form, author name, email address, book title, genre, description, and any optional information you choose to include (Amazon URL, motivation text).
• Admin panel access, username and encrypted password, used exclusively for site management by authorised persons.

We do not collect data through tracking pixels, fingerprinting, or behavioural analytics tools. We do not use cookies for profiling or advertising.

This website uses browser localStorage, not cookies, to save your preferences locally on your device. No data is transmitted to our servers through this mechanism.

Specifically, we store:

• Language preference, whether you selected English or Italian. Stored as cpb_lang.
• Saved books, books you marked as favourites using the ♡ button. Stored as cpb_favs.

These values remain on your device only and can be cleared at any time by clearing your browser's local storage or site data. They are never sent to our servers and do not constitute personal data processing under the GDPR.

When you submit a book for consideration via our submission form, the data you provide is used exclusively to evaluate your submission and contact you regarding our editorial decision.

Legal basis: legitimate interest in managing editorial submissions (Art. 6(1)(f) GDPR), and pre-contractual steps at your request.

Submission data is stored securely in a protected directory on our server and in our administrative email inbox. It is not shared with third parties, not used for marketing without your separate consent, and is retained only for the time necessary to process and respond to your submission.

If your book is accepted, your author name, bio, and book information, as provided by you, will be published on the public pages of this website. You may request removal at any time.

This website contains links to Amazon.com and its regional stores. When you click an Amazon link, you leave our website and are subject to Amazon's privacy policy. We have no control over and assume no responsibility for the content or privacy practices of Amazon or any other external site.

We do not currently use Amazon affiliate links. If this changes in the future, this policy will be updated accordingly.

We do not embed third-party tracking scripts, social media pixels, or advertising networks on this website.

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Newsletter data, retained until you unsubscribe or request deletion.
• Submission data, retained for up to 12 months after the submission decision, then deleted unless an active author relationship exists.
• Admin credentials, retained for the duration of the authorised relationship, then deleted promptly upon termination.

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access, you can request a copy of the personal data we hold about you.
• Right to rectification, you can request correction of inaccurate or incomplete data.
• Right to erasure, you can request deletion of your personal data ("right to be forgotten").
• Right to restriction, you can request that we limit how we process your data.
• Right to data portability, you can request your data in a structured, machine-readable format.
• Right to object, you can object to processing based on legitimate interests.
• Right to withdraw consent, where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at privacy@curiouspaperbooks.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction.

These measures include: encrypted admin passwords (bcrypt), session management with timeout, server-side input validation and sanitisation, and restricted access to submission logs.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take our responsibility seriously.

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The date of the last update is shown at the top of this page.

If changes are material, we will notify newsletter subscribers by email. Continued use of the website after any changes constitutes acceptance of the updated policy.

For any questions, requests, or concerns relating to this privacy policy or our data practices, please contact us: