Privacy
The Fan Fiction Library is a free, non-commercial project run by one person. This page explains exactly what happens to your information: what I hold, what the services I use hold, and what nobody holds because I don't collect it.
The short version
- I collect as little as I can: an email address, a name if you give one, and the fics you save.
- No ads, no analytics, no tracking scripts. Nothing follows you around the internet.
- I never ask for your AO3 login and I can’t see your AO3 account.
- Nothing is ever sold or handed to advertisers.
- Your collections are private unless you choose to share a link.
Who's responsible
xHain hack&makespace
Grünbergerstr. 16
Berlin, Germany
I'm the data controller for this site under the GDPR. That means I'm the person you contact about any of this, and the person accountable for it.
What I hold
This is data stored in the site's own database, which I control.
Legal basis: performing the agreement you enter into when you make an account (GDPR Art. 6(1)(b)). You can't have a library without somewhere to keep it.
What third parties hold
These are the services the site runs on. Each one holds a different slice, and none of them get the whole picture.
Supabase
Everything in the table above physically lives on Supabase’s servers. They are the storage provider; they do not use your data for their own purposes.
Their privacy policyVercel
The site runs on Vercel. Like any web host, their servers record standard technical logs when you visit: IP address, browser type, which pages were requested, and when. That is how every website on the internet works, and it is used for security and keeping the site up — not for tracking you.
Their privacy policyResend
When the site emails you — verification, password reset — Resend sends it. They hold your email address and the message content long enough to deliver it.
Their privacy policyIf you sign in with Google, Google tells the site your email address and name. That is all. The site never sees your Google password, and Google is never told anything about what you save here. If you sign up with email instead, Google is not involved at all.
Their privacy policyArchive of Our Own
The site reads publicly available information from AO3 pages: title, author, word count, chapter status. The same information anyone can see by visiting the page.
Important: I never ask for, receive, or store your AO3 login. The site has no access to your AO3 account, your bookmarks, or anything private there. The Fan Fiction Library is not affiliated with AO3 or the Organization for Transformative Works.
What nobody holds, because I don't collect it
No analytics
No advertising
No cross-site tracking
No data sales
No profiling
No payment details
Cookies
One cookie, and it's the one that keeps you logged in.
Session cookie — remembers that you're signed in, so you don't have to log in on every page. It lasts until you sign out or it expires.
That's it. No tracking cookies, no advertising cookies, no third-party cookies. Because the only cookie is strictly necessary for the site to work, there's no consent banner — strictly necessary cookies don't need one.
The site also keeps your light or dark theme preference in your browser's local storage. That never leaves your device.
The browser extension
The extension reads the AO3 page you're already looking at, so it can save the fic's details to your library.
- It only runs on Archive of Our Own pages.
- It doesn’t read anything else you browse.
- It uses the login you already have on this site.
- It sends the same details the site would collect anyway: title, author, fandom, word count, status.
Sharing a collection
If you share a link to a collection, anyone with that link can see the fics in it. Your private notes are never included. Collections are private by default and only become visible if you deliberately share them.
Your rights
Under the GDPR you can:
To use any of these, email privacy@ff-library.com. I'll respond within a month, usually much sooner — it's one person reading that inbox.
If you'd rather complain to a regulator, mine is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Deleting your account
When you delete your account, everything goes: your email address, your name, your password hash, your collections, your saved works and your notes. It's a full deletion, not a flag on a row.
Until self-service deletion is available in the app, email privacy@ff-library.com and I'll delete your account by hand.
Children
This site isn't intended for children under 16. If you're under 16 and have made an account, ask a parent or guardian to email me and I'll delete it.
Changes to this page
If this changes in a way that matters, I'll update the date at the top and note it in the changelog. I won't quietly start collecting more and not tell you.