Privacy policy
Last updated 20 August 2026
This explains what we keep, why we keep it, and how to get rid of it. It is written to match what the software actually does.
What we store
- Your account — name, username and email address. Your password is stored only as a one-way hash; we cannot read it, and neither can anyone who obtains the database.
- Delivery addresses you save, and a copy attached to each order — so editing your address later never rewrites where past orders went.
- Orders: what you bought, what it cost and its status.
- Your cart and wishlist, including books you asked to be notified about.
- Buyback requests — the book, the condition, what we offered, and the UPI id if you asked for a bank payout.
- Store credit as a list of movements, so every rupee added or spent has a record you can see on your own page.
- Reviews you write, shown publicly with your display name.
What we do not store
Card numbers. Payments go through our payment provider’s own window. Card and UPI credentials are entered there and never reach our servers, so there is nothing of that kind for us to lose.
What is kept in your browser
We do not use advertising or tracking cookies. Your browser holds two things:
- Your session — the tokens that keep you signed in. Signing out removes them and revokes them on our side.
- A guest cart, if you add books before signing in. It stays in your browser until you sign in, at which point it merges into your account cart and the local copy is cleared.
Emails we send
Only about your own activity — never marketing you did not ask for:
- Order confirmation, and updates when an order is packed, shipped or delivered.
- A notice when a book you asked about comes back into stock.
- Progress on a book you offered to sell us.
- One reminder if you leave something in your cart.
- A password reset link, when you ask for one.
Who else sees it
Our payment provider, to take payment and issue refunds. Our email provider, to deliver the messages above. Our hosting and database provider, which stores the data described here over an encrypted connection.
We do not sell your data, and we do not share it for advertising.
Getting your data removed
Ask us and we will delete your account and everything attached to it — cart, wishlist, addresses, buyback requests and credit balance. Deleting the account forfeits any unspent store credit, so spend or cash it out first.
Completed orders are kept as long as we are required to keep sales records, because they are also our accounts.
Contact us to make a request, or to correct anything that is wrong.