Privacy Policy

Effective date: April 11, 2026 · Terms of Service

This Privacy Policy explains what information EekPub collects, how it is used, and the rights available to you. It applies to the EekPub website and file-processing service (together, the "Service").

Short version: We do not sell your personal data. We do not use analytics. Uploaded files are deleted within one hour. The only third-party data collection comes from Google AdSense (advertising cookies, with your consent) and Google Fonts (IP address logged by Google's CDN).

1. Data We Collect

Uploaded EPUB files. When you upload a file, it is stored temporarily on our server for the sole purpose of analysing and repairing it. Files are automatically deleted within one hour. We do not read, index, or retain the content of your files beyond what is required to process them.

Server logs. Our web server automatically records standard access logs that include your IP address, browser user-agent string, the URL requested, the HTTP response code, and a timestamp. These logs are retained for up to 30 days for security and debugging purposes and are never shared with third parties.

Cookie consent preference. When you interact with the cookie banner, your choice ("accepted" or "essential only") is stored in your browser's localStorage. This is not a cookie; it never leaves your device and is not transmitted to our servers.

Data we do NOT collect. We do not collect your name, email address, account credentials, payment information, or any other personal information. No user accounts are required. No analytics tools (e.g. Google Analytics) are used.

2. How We Use Your Data

Uploaded files are processed to detect and repair EPUB issues. They are not used for any other purpose.
Server logs are used to diagnose technical problems, investigate security incidents, and monitor for abuse.
We do not use your data to train machine learning models.
We do not use your data to build profiles, target advertising, or make automated decisions about you.

3. Third-Party Services

Google AdSense. We use Google AdSense to display advertisements. When you visit the Service, Google may set cookies and collect data about your browsing behaviour to serve personalised ads, subject to your cookie consent choice (see Section 5). Google's data collection is governed by Google's Privacy Policy. You can manage Google's ad personalisation at adssettings.google.com.

Google Fonts. We load the Inter typeface from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). Your browser makes a request to Google's CDN to download the font files; Google may log your IP address as part of that request. Google Fonts does not set cookies. See Google Fonts FAQ for details.

4. Cookies & Similar Technologies

What cookies does EekPub set?

EekPub itself sets no cookies. We do not use session cookies, persistent cookies, tracking pixels, or fingerprinting. Your session state (the uploaded file reference) is managed server-side and identified by a UUID returned in the API response — it is never stored in a browser cookie.

What cookies do third parties set?

If you consent to advertising cookies, Google AdSense may set the following categories of cookies:

Advertising / targeting cookies — used by Google to build a profile and serve relevant ads based on your browsing history. Examples: IDE (Google DoubleClick), DSID.
Ad measurement cookies — used to measure the effectiveness of ad campaigns. Examples: conversion, _gcl_au.

These cookies are only set if you choose "Accept All" in the cookie banner. If you choose "Essential Only", we signal to Google via Google Consent Mode v2 that advertising and personalisation cookies must not be set. Google may still show ads, but they will be non-personalised and untargeted.

Managing your cookie preferences

You can change your cookie preference at any time by clicking "Manage Cookie Preferences" in the footer. You can also control cookies through your browser settings or opt out of Google's advertising cookies at optout.aboutads.info or the NAI opt-out tool.

5. Legal Bases for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases:

Contract performance — processing your uploaded file is necessary to provide the Service you requested.
Legitimate interests — retaining server logs for security and abuse prevention, where those interests are not overridden by your rights.
Consent — advertising cookies set by Google AdSense are only enabled with your explicit, freely given consent. You may withdraw consent at any time by clicking "Manage Cookie Preferences" in the footer.

6. Your Rights Under GDPR and UK GDPR

If you are in the EU or UK, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate data.
Erasure ("right to be forgotten") — request deletion of your data, where we have no legal obligation to retain it.
Restriction — request that we restrict processing of your data in certain circumstances.
Data portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — for processing based on consent (advertising cookies), withdraw at any time without affecting prior processing.
Lodge a complaint — file a complaint with your local data protection authority (e.g. the ICO in the UK, or your national DPA in the EU).

Because we collect minimal data and do not hold accounts, most of these rights have limited practical scope for EekPub. To make a request, contact us using the details in Section 11.

7. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you specific rights.

Do we sell or share personal information? EekPub does not sell personal information. When you choose "Accept All" in the cookie banner, we permit Google to set advertising cookies that may constitute "sharing" personal information for cross-context behavioural advertising under CPRA. You can opt out of this sharing at any time by clicking "Do Not Sell or Share My Personal Information" (which opens the cookie preference panel) or the link in the footer.

Your rights under CCPA/CPRA include:

Right to know — what personal information we collect, use, disclose, and share.
Right to delete — request deletion of personal information we have collected from you.
Right to opt out — opt out of the sale or sharing of personal information (see above).
Right to limit use of sensitive personal information — we do not collect sensitive personal information.
Right to non-discrimination — we will not discriminate against you for exercising your rights.

To exercise your rights, contact us using the details in Section 11. We will respond within 45 days as required.

8. Canada (PIPEDA / Law 25)

If you are located in Canada, we collect and process personal information only with your knowledge and consent, for the purposes described in this policy. You have the right to access the personal information we hold about you and to challenge its accuracy. To exercise these rights, contact us using the details in Section 11.

9. Data Transfers

Our servers may be located outside your country of residence. By using the Service, you consent to the transfer of your data to those locations. We take reasonable steps to ensure that your data is protected in accordance with this Privacy Policy.

When Google AdSense is used, data may be transferred to the United States. Google participates in the EU–U.S. Data Privacy Framework and maintains Standard Contractual Clauses for transfers from the EEA and UK.

10. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.

11. Contact

For privacy-related requests or questions, contact us at:

EekPub Privacy
Email: privacy@[yourdomain.com]
(Replace with your actual contact address before deploying.)

We aim to respond to all requests within 30 days (or within the timeframe required by applicable law).

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "effective date" at the top of the page. For material changes, where we have a means to contact you, we will provide notice. Continued use of the Service after any change constitutes your acceptance of the revised policy.