Last updated 4 October 2026
Privacy Policy
This policy explains what personal data The Reteller collects, why, and what your rights are. We collect as little as we can.
Who is responsible
Dragutin Djokovic, 11080 Beograd, Serbia, is the controller of your personal data. Contact: support@thereteller.com.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email address, password (stored only as a secure hash) | When you create an account | To run your account and sign you in |
| Name, email and profile picture from Google | Only if you choose "Continue with Google" | To sign you in |
| Which novels you opened and when, and which you marked as read | While you use the site | To apply the reading-slot rules and show your Read / To read lists |
| Subscription status, renewal dates and Paddle customer/subscription IDs | When you subscribe | To know whether you are a subscriber |
| IP address and browser type, stored with your login session | When you sign in | Security and preventing abuse |
We do not receive or store your card or bank details — payments are handled entirely by Paddle.
Legal basis
- Contract: running your account and subscription.
- Legitimate interests: keeping the Service secure and preventing abuse.
- Legal obligation: keeping records where the law requires it.
Cookies
We use only the cookies and browser storage needed for the site to work: sign-in cookies that keep you signed in, and small items in your browser's local storage that remember where you stopped reading and that your time zone was sent. We don't use advertising, tracking or analytics cookies. Paddle's checkout may set its own cookies when you open it; see Paddle's privacy notice. The full list is in our Cookie Policy.
Your time zone (detected from your browser) and your chosen reading-day start time are stored with your account to decide when your reading slots reset.
Who we share data with
We don't sell your data. We share it only with service providers that help us run the Service:
- Paddle — our reseller and Merchant of Record, which processes payments, taxes and invoices. For payment data Paddle acts as an independent controller under its own privacy notice.
- Vercel — hosting of the website.
- Our database provider — storage of account and reading data.
- Resend — sending account emails, such as password-reset links.
- Google — only if you sign in with Google.
Some of these providers are based outside your country, including in the United States. Where data is transferred outside the EU/EEA or Serbia, it is protected by safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
- Account and reading data: as long as your account exists. When you delete your account it is erased immediately (backups held by our hosting providers are overwritten within 30 days).
- Login sessions expire automatically.
- Payment and tax records are kept by Paddle for as long as tax law requires.
Your rights
You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw any consent you gave. Email support@thereteller.com and we'll respond within 30 days. You can also complain to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (www.poverenik.rs), or to the data protection authority where you live.
To delete your account, use "Delete account" on your Account page, or email us from the address you signed up with. Deleting your account also cancels any active subscription immediately.
Children
The Service is not intended for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy in a significant way we will tell registered users by email or on the site. The date at the top shows the latest version.