Privacy

Last updated 9 October 2026.

What we store

• The cards you publish: the theme, the name you typed (if any), the nine books, and your notes. Cards are public at their link.
• Published cards appear on the homepage and in Readers unless you turn off “Show my card on the site”. Everyone has the Reader role. Other reader labels are optional. Public post links you add also appear with the card.
• The country your card was published from, taken from your connection, for counting where cards come from. We do not store your IP address.
• A count of buy-button clicks per shop, per country, per day. We do not record who clicked.
• Reports you send, with what you typed in them.
• If you ask us to email a card link, Bento processes the email address to queue and deliver that one email. We do not save the address in our database or add it to a marketing list.

What stays on your device

The site sets no cookies. Your browser keeps essential information in its own storage so the site works: your unfinished picks, the country you chose for shops, and the private delete links of cards you made. Clearing your browser's site data removes them. We also remember your analytics choice for 90 days.

Optional journey analytics

If you choose Allow analytics, we assign random visitor and session IDs in your browser storage. We record page categories, selected book IDs, design choices, searches that succeed or fail, publishing, sharing actions, and shop clicks. We keep a broad traffic source, such as Facebook or Google, and a mobile or desktop label. This lets us find where visitors get stuck and improve the site.

We do not collect your name, notes, search text, full page or referrer URLs, private delete links, or IP address in journey events. We do not record your screen or keystrokes. A random browser ID is not your real identity and does not link different devices.

The site stores journey data in its private Cloudflare database and can send it to PostHog when connected. Events are removed after 90 days during the next tracking or report request. PostHog has its own retention settings. Choose Analytics preferences in the footer to decline at any time. This stops future browser tracking and removes the analytics IDs. Open tabs also request server revocation. If a session credential is no longer available, that server session expires after 30 minutes without tracked activity. Earlier events remain until their retention period ends. Declining does not affect creating, sharing, or buying.

Error reports

When part of a page fails in your browser, for example a script error or a search file that will not load, your browser sends the site a short error report. It says what failed: the error type, an error code from a fixed list (such as "load failed" or "not a function") instead of the error message, the site file involved, the kind of page (such as the picker or a card), and your browser and system with their main version number, such as Chrome 154 on iOS 26.

Error reports contain no error message text, no visitor or session ID, nothing you typed, no card links, and no IP address. A page sends at most five. We use them only to find and fix problems, keep them in the site's private Cloudflare database for 30 days, and do not send them to PostHog or anyone else. They are separate from optional analytics and are sent whatever your analytics choice.

Services we use

• Cloudflare hosts the site. Cloudflare Turnstile checks that a person, not a bot, is publishing or reporting. Cloudflare Web Analytics counts visits without cookies.
• PostHog provides optional product analytics when connected. PostHog privacy policy.
• Bento sends a public card link when you ask for it by email. We use the address only for that one requested message and disable Bento's open, click, and UTM tracking for it. Bento privacy policy.
• Open Library supplies book data and covers.
• When you follow a buy button, you are on the shop's own site, under its privacy policy, and it may set its own cookies to credit the sale.

Deleting your data

Use your card's private delete link, or write to hello@booksthatmademe.com.