Privacy Policy

Last updated: 2026-07-24

This policy explains how ImagineYourBook.com, operated by Chris Mayer as identified in our Impressum, collects and uses personal data.

1) Data We Collect

• Account data (email, authentication identifiers, and profile details supplied by your chosen sign-in provider, such as name or profile image).
• Usage data (book prompts, generation metadata, billing/plan state, and service logs).
• Technical data (IP address, browser type, device information, and diagnostics).
• Support data you choose to submit, such as your message, optional reply email, the page where you requested help, and limited technical context needed to diagnose the issue.

2) Optional Analytics and Marketing Tools

Meta Pixel is used only after you actively consent through our cookie notice. You can reopen your choice any time via Cookie settings in the footer.

Google Analytics and Google Ads conversion measurement use the Google tag (`gtag.js`, measurement ID: G-7PV47M3YW8) installed directly on every page of the site for core traffic and conversion measurement. Meta Pixel (Pixel ID: 990385120007334) remains optional and loads only after consent.

These providers may receive technical and usage data such as page URLs, referrer information, browser/device details, and event metadata. Depending on the provider setup, processing may also involve transfers outside the EU/EEA subject to the provider's safeguards and contractual terms.

3) Cookie Choice Storage

To remember whether you accepted or rejected optional Meta Pixel tracking, we store your cookie choice locally in your browser. This preference storage is used only to manage the notice and your selection.

When a landing page experiment is active, we may store a first-party experiment assignment and anonymous visitor ID to keep page variants consistent and count signup and email-confirmation conversion. Experiment events do not include your IP address, browser user agent, or email address.

When Google sign-in is available, we use Google as the identity provider and Supabase to complete authentication, link matching verified-email identities, and maintain your account session. Google and Supabase may process your email address, provider identifier, basic profile information, authentication requests, and related security metadata under their respective privacy terms. We do not request access to Gmail, Drive, Calendar, or other Google services.

4) Affiliate Referral Tracking

We participate in a merchant affiliate program administered by Lemon Squeezy. Pages on this site load Lemon Squeezy's affiliate tracking script. If you arrive through an affiliate link containing an affiliate code (for example, an aff query parameter), Lemon Squeezy creates an anonymous referral identifier in its system so that a qualifying later purchase can be attributed to the referring affiliate. Lemon Squeezy describes this affiliate referral method as cookieless.

For this purpose, Lemon Squeezy may process the affiliate code, referral identifier, page and referrer information, purchase and subscription events, and technical request information such as IP address, browser, device, and timestamps. The current program attribution window is 14 days. We use this information to administer and protect the affiliate program, calculate commissions, prevent fraud, resolve disputes, and understand partner performance.

Lemon Squeezy processes information under its own Privacy Policy. Its processing may involve transfers outside the EU/EEA under applicable safeguards.

5) How We Use Data

• To operate your account and generation workflows.
• To authenticate you through email/password or, when you choose it, Google sign-in.
• To send behavior-based account and product emails, subject to the email preferences and opt-out controls provided in those messages.
• To process payments/subscriptions and prevent fraud.
• To improve model prompts, reliability, and product features.
• To answer support requests and identify recurring points of confusion or failure in the service.
• To comply with legal obligations and enforce our Terms.

6) Legal Bases

Where the GDPR or similar law applies, we process data as necessary to perform a contract or take requested pre-contract steps, comply with legal obligations, pursue legitimate interests such as service security, fraud prevention, product operations, analytics, and affiliate attribution, and, where required, based on consent. You may withdraw consent at any time without affecting earlier lawful processing.

7) Sharing

We may share data with trusted providers that help operate the service (for example cloud hosting, payments, analytics, marketing measurement, and authentication), subject to contractual safeguards and legal requirements.

If you actively select the optional newsletter checkbox, we use Sendy to manage newsletter delivery and unsubscribe status. Sendy receives the email address and limited subscription metadata needed for that purpose. Google sign-in by itself does not subscribe you; every newsletter includes an unsubscribe option.

We use Resend to deliver behavior-based account and product emails. For delivery, Resend processes the recipient email address, message content, and delivery metadata. Each lifecycle message includes a direct opt-out; using it stops these lifecycle messages without changing a separate newsletter preference.

When you use the support form, the request is stored with our service provider and a copy may be sent through Resend to our fixed administrative inbox. We do not automatically send mail to an address entered into the public support form. For abuse prevention, the support system stores a salted one-way hash derived from the request connection rather than the raw IP address in the support record.

8) Data Retention

We retain data for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Support messages may also be retained as needed to resolve the request and identify recurring product problems; requests marked as spam may be retained long enough to protect the form from repeated abuse.

9) Your Responsibilities

Please do not submit personal data in prompts unless you have a lawful basis and permission to do so. You are responsible for ensuring your content and publication workflows comply with applicable laws.

10) Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and export personal data, as well as the right to complain to a competent data protection authority. Contact us to submit a request.

11) Security

We apply reasonable technical and organizational safeguards, but no system can be guaranteed fully secure.

12) Contact

For privacy requests, contact admin@imagineyourbook.com.