Effective: September 30, 2026
Optional reading measurement
Optional reading and discovery measurement is off until you allow it on this device. Reading, downloads, purchases and First Look work without it. Change your choice in Optional reading measurement. Do Not Track and Global Privacy Control override an allowed choice.
When allowed, controlled events count page and book views, sample or reading starts, recommendations, download actions, sharing and retailer links. A successful file response can be counted by the server; it does not prove that every byte was saved. First Look submission and confirmation counters require a separate measurement choice on the device making that request. Marketing consent alone does not enable these counters.
Ordinary journey records contain a random event identifier, a fixed event name, public book or page context and a timestamp. They do not contain an email address, account, reading text, search query, full query URL or raw referrer. Approved referral context is limited to accepted campaign, source, medium, content and asset codes. With optional measurement allowed, an audiobook checkout can retain approved campaign, source and medium codes alongside its order so a verified payment can be counted with that context. The browser reference expires after 30 minutes; the accepted order context follows the two-year measurement retention period. No campaign context is attached when consent is absent, Do Not Track is enabled or Global Privacy Control is enabled. An opted-out retry clears context from an unpaid checkout. Historical opted-in support checkouts may also retain approved referral context. Missing attribution remains unknown. A download may carry a random, single-action measurement nonce; it is not a visitor or access credential.
If an optional finder test is active, an allowed device stores a random token. The server uses an experiment-specific keyed hash to count an exposed device and its first selection once. The raw token is not stored in experiment records or joined to subscriber, order or payment records. One device is not necessarily one person. Declining measurement removes the device token; completed experiment unit records are scheduled for deletion once the completed experiment’s recorded end is more than thirty days old. Ordinary event records and daily aggregates follow the two-year deletion policy. No public analytics readback is available.
Necessary consent, delivery, security and transaction records are separate from optional journey measurement. Verified payments, refunds and subscription states can be counted for service and financial reconciliation without an optional measurement choice. They are not evidence that a reader clicked an advertisement or completed a book. Synthetic quality assurance records are separated from live reporting.
Reading and listening access
The complete Short Novel Collection is available at no charge every day, without an account, payment details, email verification or newsletter subscription. Read every chapter in your browser or keep the EPUB and PDF.
The complete English Providence audiobook is USD 3.99 every day. The Prologue and complete Part One remain available every day without an account. The free audio opening covers the Prelude and all of Part One. The approved written Prologue is also available.
Reading position and display preferences may be saved in this browser; clear site data to remove them. Saving a position does not create an account or a purchased library entitlement.
Purchases and your private library
For direct purchases, the reading system stores the delivery email in encrypted form, a keyed email lookup value, ordered editions and languages, payment references, amounts, currency, tax, refunds, delivery state and reading entitlements. Stripe processes payment and billing details when direct checkout is enabled. GoodNovels.org does not store complete payment card numbers. Brevo handles transactional receipts and reading links using the existing authenticated sending identity. Buying a book does not give marketing consent.
My Books uses a secure, essential session cookie lasting up to thirty days. Reading links expire after thirty minutes and can be used once. The checkout session proof expires after two hours. Reading position, chapter bookmarks and display preferences are stored privately so they can be restored. A basket and interface language may be stored on the device. Private reading and order pages are excluded from ordinary public page analytics.
Library and purchase records are retained to provide purchased access, address customer requests and meet applicable accounting requirements. Expired access credentials are removed during store maintenance. You can request access, correction or deletion by contacting quinlan.h.motley@gmail.com. Required transaction records and minimal security evidence may need to be retained. Reading activity supports access and continuity; it is not sold as an advertising profile.
Gifts and reader reviews
Gift records distinguish the purchaser’s order from a recipient’s reading access. We retain claim state, a keyed verified recipient identity, and entitlement records. Unclaimed links are stored as a cryptographic hash and an encrypted recoverable value for purchaser management. The purchaser can see payment and claim status, but not recipient identity or reading activity. Private gift and review-management pages are excluded from public analytics.
Review records contain the contributor’s keyed verified email identity, original and current text, chosen public name, consent evidence, language and edition, acquisition evidence, disclosure, spoiler status, and moderation history. Only approved review text, chosen attribution, public acquisition label, disclosure, and publication information are displayed. Edits and withdrawal are available through Manage your reviews. Private consent and moderation records remain for service integrity and handling disputes; contact us about access, correction, or deletion.
Saved books
The optional guest shortlist uses goodnovels.saved-books.v1 in local storage. It contains stable public book identifiers only, with no email, payment details, access links, or paid text. It stays in this browser until removed or site data is cleared. It is not an account, a purchased library, or a cross-device service.
First Look
If you request First Look, the site receives your email address, country, preferred reading language, consent choice, and the fixed page and approved campaign context associated with the request. The email address is encrypted in the private site database. A keyed value is used for duplicate prevention, rate limiting, consent evidence, and suppression. Brevo processes the email address to deliver the confirmation, welcome, and requested First Look sequence and to maintain confirmed list membership. The sequence may include an advance excerpt, a release note, Book Club material, and author news according to the reader's saved topic choices. A request is not confirmed until you choose the confirmation action in the email.
Pending confirmation tokens expire after twenty four hours. Unconfirmed subscriber records are scheduled for deletion after seven days. Confirmed readers can change preferences, download their First Look data, unsubscribe immediately, or delete the subscriber record through the private preference link. An unsubscribed subscriber profile is scheduled for deletion after ninety days. Choosing deletion removes the subscriber profile and saved preferences from the site database immediately, while encrypted provider deletion work remains available for a retry if needed. After either choice, a minimal keyed suppression value remains so the choice can be honored without retaining the email address in readable form. Pending First Look email work is canceled and its encrypted message payload is cleared when you unsubscribe or delete the subscriber record.
Consent and delivery evidence may retain the keyed email value with controlled event, campaign, delivery status, and timestamp fields for no more than two years. A completed preference action has an encrypted replay record that expires after thirty days. For a data export, that encrypted replay record contains the generated export until it expires. Completed privacy request records are also scheduled for deletion after thirty days. Encrypted provider work remains in the restricted outbox until it succeeds or reaches its retry limit. Terminal outbox records are deleted after ninety days. When provider deletion succeeds, its encrypted email payload is cleared immediately.
Hosting and security
Private catalog and purchase backups are kept in restricted site storage. A scheduled service from cron-job.org calls the protected store maintenance endpoint to recover payment and delivery work and create backups. Its responses contain operational counts, not customer email addresses, payment details or book text. Render hosts the EPUB validation service used by the private publishing desk. It temporarily processes uploaded book files for format validation and deletes the temporary files after each check; customer purchase records are not sent to that service.
Hosting and security logs may process IP address, browser and device information, request metadata, timestamps, and security signals for delivery, abuse prevention, and incident response. The exact provider retention period has not been independently verified by GoodNovels.org.
Cloudflare, the site's security and content delivery provider, may set the strictly necessary __cf_bm bot management cookie. It expires after 30 minutes of inactivity and is not used by GoodNovels.org for advertising.
Cookies and local storage
The public site does not require an account and does not intentionally set advertising cookies. The edition selector stores your country, language, and locale choice in local storage undergoodnovels.preferences.v2. The Reading Room stores your voluntary light setting and text size undergoodnovels.reader.display. The opening sample uses goodnovels.opening.display and goodnovels.opening.position for local display and section preferences. Those preferences remain on your device until you remove them or clear site data. The Reading Room stores the names of completed progress milestones in locale specific session storage under goodnovels.sample.events.v3 with the approved campaign code so each milestone is sent no more than once for that campaign during the browser session. The session value is not a user identifier and is not transmitted as a value to the server.
Approved referral continuity uses goodnovels.analytics.attribution.v2. It contains only accepted campaign, source, medium, content, and asset codes and disappears when the browser session ends. It does not contain your name, email address, message, account, full page address, query string, raw referrer, or a generated visitor identifier. Synthetic quality assurance records can be created only by protected server workflows and are excluded from owner commerce reporting.
External destinations
Amazon, the United States Conference of Catholic Bishops, your mail application, and a destination selected through your device's native sharing feature have their own privacy practices. Choosing one of those actions leaves GoodNovels.org or opens another application under that provider's terms.
Email inquiries outside First Look
Email links open your mail application. Your message is sent to the independent mailbox provider used for quinlan.h.motley@gmail.com, not through a form on this website. No formal mailbox retention schedule is published at this time, so include only the information needed for the inquiry.
Your requests
You may ask about access, correction, or deletion of information you sent by email. A confirmed First Look reader can also use the private preference link for access and deletion. Requests are handled subject to applicable law and provider retention requirements. GoodNovels.org does not intentionally sell personal data or use advertising identifiers on this site.
Contact
Questions may be sent to quinlan.h.motley@gmail.com.
See also the cookie notice and consent notice.