Privacy

Privacy notice

Last updated: 29 September 2026

1. Controller

2. Hosting and server logs

Prescillium is hosted by Render Services, Inc. The web service is deployed in Render's Frankfurt, Germany region.

When you visit Prescillium, Render and the application server may process technical connection data needed to deliver and secure the site. This can include your IP address, date and time of the request, requested URL, HTTP status, browser/user-agent information, and referrer information where your browser sends it.

The purpose is to provide the website reliably, diagnose technical problems, and protect the service against misuse. The legal basis is Article 6(1)(f) GDPR (legitimate interests in the secure and reliable operation of the website).

On the current Render Hobby workspace plan, dashboard logs are retained for 7 days. Render's terms incorporate a Data Processing Addendum governing its processing on behalf of customers. More information is available in Render's Privacy Policy and Data Processing Addendum.

3. Book searches and recommendations

When you search for a title or request recommendations, Prescillium processes the search text and/or identifiers of the books you selected so that the server can return search results and recommendations. The current application does not provide user accounts and does not create a persistent reading profile from these requests.

Book-search text is sent to the Prescillium server in the request body rather than in the page URL. This reduces accidental inclusion of search terms in ordinary URL-based access logs, although hosting and security infrastructure may still process technical request metadata.

4. Book-cover images from third parties

Some book covers are loaded directly from third-party image services. The current catalogue can use Open Library (covers.openlibrary.org) and Google Books (books.google.com). When your browser loads one of these images, the relevant provider receives the technical information necessary to serve the image, including your IP address and browser information.

Prescillium is configured not to send the Prescillium page URL as a referrer with these cover-image requests. This does not prevent the third-party image provider from receiving your IP address and other connection data.

These providers may process data outside the European Economic Area. Further information about their handling of data and any applicable international-transfer safeguards can be found in the providers' own privacy information: Internet Archive / Open Library and Google.

5. Cloudflare Web Analytics

Prescillium uses Cloudflare Web Analytics to understand aggregate website usage and performance, such as visits, page views, referrers, countries, device types, and Core Web Vitals.

Cloudflare states that Web Analytics does not collect or use visitors' personal data, does not use cookies or localStorage to collect usage metrics, and does not track individual users across customer websites. Prescillium uses the service to understand how the site is used and to improve its operation and performance. To the extent that personal data is processed in connection with the analytics request, the legal basis is Article 6(1)(f) GDPR (legitimate interest in aggregate usage and performance measurement).

The analytics service is provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare describes its international-transfer safeguards, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses, in its privacy documentation. More information is available in Cloudflare's Web Analytics documentation and Privacy Policy.

Prescillium does not currently use advertising trackers and does not set its own tracking cookies or use localStorage for tracking. No consent banner is therefore used for the current site configuration.

6. Contact by email

If you contact Prescillium at contact@prescillium.com, the information you send is processed so that your message can be read and answered. Depending on the nature of the request, the legal basis is Article 6(1)(f) GDPR (legitimate interest in responding to enquiries) or Article 6(1)(b) GDPR where the communication concerns steps connected with a contract.

Email for the Prescillium domain is hosted by mailbox.org, operated by Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany. More information is available in mailbox.org's privacy information.

Email correspondence is retained only for as long as it is reasonably necessary to deal with the enquiry and any related follow-up, unless a longer retention period is required by law or is necessary for the establishment, exercise, or defence of legal claims.

7. Your data-protection rights

Where the legal requirements are met, you may have rights including access, rectification, erasure, restriction of processing, objection to processing, and data portability. Where processing is based on consent, consent can be withdrawn for the future.

You also have the right to lodge a complaint with a competent data-protection supervisory authority.

8. Automated decision-making

Prescillium uses automated similarity and matching calculations to recommend books. These recommendations are not used to make decisions that produce legal effects or similarly significant effects concerning users within the meaning of Article 22 GDPR.

9. Changes to this notice

This notice will be updated when Prescillium's hosting, analytics, advertising, account system, external services, or other material data-processing practices change.