Effective: September 15, 2026
Privacy preserving measurement
GoodNovels.org records private event records and daily aggregate counts for page visits, approved campaign referrals, market and language choices, Book Sample reading progress, verified edition actions, resource downloads, sharing, outreach support actions, and reader relationship requests. Each request uses a fixed event name, a canonical page path, and a narrow set of controlled context values. The application rejects free text and unknown fields. Analytics records do not include your name, email address, message, account, cookie, full page address, query string, raw referrer, raw user agent, or generated visitor identifier.
Protected server workflow quality assurance events are marked separately so they can be excluded from performance analysis. Approved attribution may remain in session storage during one browser session so the reader journey stays consistent across pages. It is limited to accepted campaign, source, medium, content, and asset codes. No public analytics readback is available. Event records and daily aggregates are subject to a two year deletion policy.
Direct purchases and your private library
The direct reading system stores the delivery email in encrypted form, a keyed email lookup value, ordered editions and languages, payment references, amounts, currency, tax, refunds, delivery state and reading entitlements. Stripe processes payment and billing details when direct checkout is enabled. GoodNovels.org does not store complete payment card numbers. Brevo handles transactional receipts and reading links using the existing authenticated sending identity. Buying a book does not give marketing consent.
My Books uses a secure, essential session cookie lasting up to thirty days. Reading links expire after thirty minutes and can be used once. The checkout session proof expires after two hours. Reading position, chapter bookmarks and display preferences are stored privately so they can be restored. A basket and interface language may be stored on the device. Private reading and order pages are excluded from ordinary public page analytics.
Library and purchase records are retained to provide purchased access, address customer requests and meet applicable accounting requirements. Expired access credentials are removed during store maintenance. You can request access, correction or deletion by contacting goodnovels@mail.com. Required transaction records and minimal security evidence may need to be retained. Reading activity supports access and continuity; it is not sold as an advertising profile.
First Look
If you request First Look, the site receives your email address, country, preferred reading language, consent choice, and the fixed page and approved campaign context associated with the request. The email address is encrypted in the private site database. A keyed value is used for duplicate prevention, rate limiting, consent evidence, and suppression. Brevo processes the email address to deliver the confirmation, welcome, and requested First Look sequence and to maintain confirmed list membership. The sequence may include an advance excerpt, a release note, Book Club material, and author news according to the reader's saved topic choices. A request is not confirmed until you choose the confirmation action in the email.
Pending confirmation tokens expire after twenty four hours. Unconfirmed subscriber records are scheduled for deletion after seven days. Confirmed readers can change preferences, download their First Look data, unsubscribe immediately, or delete the subscriber record through the private preference link. An unsubscribed subscriber profile is scheduled for deletion after ninety days. Choosing deletion removes the subscriber profile and saved preferences from the site database immediately, while encrypted provider deletion work remains available for a retry if needed. After either choice, a minimal keyed suppression value remains so the choice can be honored without retaining the email address in readable form. Pending First Look email work is canceled and its encrypted message payload is cleared when you unsubscribe or delete the subscriber record.
Consent and delivery evidence may retain the keyed email value with controlled event, campaign, delivery status, and timestamp fields for no more than two years. A completed preference action has an encrypted replay record that expires after thirty days. For a data export, that encrypted replay record contains the generated export until it expires. Completed privacy request records are also scheduled for deletion after thirty days. Encrypted provider work remains in the restricted outbox until it succeeds or reaches its retry limit. Terminal outbox records are deleted after ninety days. When provider deletion succeeds, its encrypted email payload is cleared immediately.
Hosting and security
Private catalog and purchase backups are kept in restricted site storage. A scheduled service from cron-job.org calls the protected store maintenance endpoint to recover payment and delivery work and create backups. Its responses contain operational counts, not customer email addresses, payment details or book text. Render hosts the EPUB validation service used by the private publishing desk. It temporarily processes uploaded book files for format validation and deletes the temporary files after each check; customer purchase records are not sent to that service.
Hosting and security logs may process IP address, browser and device information, request metadata, timestamps, and security signals for delivery, abuse prevention, and incident response. The exact provider retention period has not been independently verified by GoodNovels.org.
Cloudflare, the site's security and content delivery provider, may set the strictly necessary __cf_bm bot management cookie. It expires after 30 minutes of inactivity and is not used by GoodNovels.org for advertising.
Cookies and local storage
The public site does not require an account and does not intentionally set advertising cookies. The edition selector stores your country, language, and locale choice in local storage undergoodnovels.preferences.v2. The Reading Room stores your voluntary light setting and text size undergoodnovels.reader.display. Those preferences remain on your device until you remove them or clear site data. The Reading Room stores the names of completed progress milestones in locale specific session storage under goodnovels.sample.events.v3 with the approved campaign code so each milestone is sent no more than once for that campaign during the browser session. The session value is not a user identifier and is not transmitted as a value to the server.
Approved referral continuity uses goodnovels.analytics.attribution.v2. It contains only accepted campaign, source, medium, content, and asset codes and disappears when the browser session ends. It does not contain your name, email address, message, account, full page address, query string, raw referrer, or a generated visitor identifier. Synthetic quality assurance records can be created only by protected server workflows and are excluded from owner commerce reporting.
External destinations
Amazon, Cash App, the United States Conference of Catholic Bishops, your mail application, and a destination selected through your device's native sharing feature have their own privacy practices. Choosing one of those actions leaves GoodNovels.org or opens another application under that provider's terms.
Choosing the outreach action records only the controlled event name, page, locale, country, language, placement, approved campaign code, and outreach stage. GoodNovels.org does not receive a Cash App payment amount, Cash App account identifier, or payment card detail through this analytics event.
Email inquiries outside First Look
Email links open your mail application. Your message is sent to the independent mailbox provider used for goodnovels@mail.com, not through a form on this website. No formal mailbox retention schedule is published at this time, so include only the information needed for the inquiry.
Your requests
You may ask about access, correction, or deletion of information you sent by email. A confirmed First Look reader can also use the private preference link for access and deletion. Requests are handled subject to applicable law and provider retention requirements. GoodNovels.org does not intentionally sell personal data or use advertising identifiers on this site.
Contact
Questions may be sent to goodnovels@mail.com.
See also the cookie notice and consent notice.