Privacy policy

Who is responsible

The “היכל הספרים” website and software are operated by תהילה אלגרבלי, exempt dealer (ע.פ.) no. 332737980, בורוכוב 37 ירושלים, tel. +972 53-393-4699. For any question or request about your data: contact@e-⁠sfarim.com.

Data we collect

• Name, verified email address and account identifier received from Google or Apple when you sign in. No password is requested or stored.
• A license number, which identifies your library, including for purchases made without an account at a kiosk.
• The public key and name of each authorized device, to lock books to that device.
• Orders and owned books, to carry out the sale and keep the accounts.
• Highlights, notes and bookmarks, and the last passage read in each book, to sync them across your devices.
• A non-reversible fingerprint of the IP address that asks to link a device, to prevent abuse. It is deleted one day after the request expires.
• Sellers only: bank transfer details, stored encrypted.
• Only with your consent: site visit statistics (pages viewed, device and browser type, approximate country), measured by Google Analytics using cookies. Nothing is measured while you read books. You can withdraw consent at any time with the “Cookie settings” link at the bottom of the site.

What we do not collect

No passwords, and not your card number: it is typed into the Nedarim Plus form and we only receive the payment result. No page-by-page reading history (only the last passage read), no precise location, no advertising.

Service providers

• Google and Apple: account sign-in.
• Nedarim Plus: card payments.
• The platform's private server: website and database.
• Cloudflare R2: encrypted book files and encrypted database backups.
• Scaleway: sending emails.
• Google Analytics: audience measurement of the site, only with your consent.

Retention

Account, device and annotation data are kept while the account is active, and deleted within 30 days of a deletion request. Orders are kept for 7 years for tax and accounting obligations.

Your rights

You may ask to access or correct your data, or to delete your account, at contact@e-⁠sfarim.com. Deleting the account removes access to the books on all devices.

Security

No passwords are stored. Books are encrypted and their keys are themselves encrypted with a master key. Each device's secret key stays in the operating system's keystore and never leaves it. Sellers' bank details are encrypted.