Privacy notice

Trajan’s Forum is a private, invitation-only reading and history beta. A one-time link permits a verified Google account to create a reader workspace; Google then provides basic account information during sign-in. GitHub remains an owner-only sign-in method. The application does not provide public profiles or social features.

Each reader may add private library records, reading notes, shelves, tags, historical relationships, related evidence, and saved Tutor conversations. Database-enforced account boundaries keep that information separate from every other reader’s workspace.

Account information is used only to authenticate the reader, enforce the invitation and account boundary, and maintain the signed-in session. Library and historical information is used to provide requested organization, recommendations, and historical tutoring.

When a reader deliberately uses an AI feature, the application sends only the bounded context needed for that request. Tutor answers may include the latest six turns from the selected saved conversation. Starter-question requests use only bounded title, author, publication-year, reading-status, and date metadata from Reading or recently Finished books; they do not include notes. Invited accounts have separate monthly limits, and the owner can disable tester AI access. The application does not sell personal information, use it for advertising, or make it public.

When a reader uses camera-assisted book intake, the phone browser removes photo metadata before upload. The prepared book or shelf image is sent to OpenAI for OCR with provider storage disabled, and Trajan’s Forum does not retain the source photograph. Recognized metadata may be checked with Open Library before the reader reviews it.

Vercel hosts the application, Supabase provides the private PostgreSQL database, Google and GitHub provide sign-in, and OpenAI processes requests for optional AI features. Tutor conversations are stored by Trajan’s Forum in Supabase; OpenAI provider-side response storage is disabled. Each provider may still process limited technical information under its own terms and privacy policy.

Trajan’s Forum maintains a private internal account record for isolation and does not publish a user directory. Authentication state is held in a protected session cookie, and OAuth credentials remain server-side.

Each reader can export only that reader’s private library, historical workspace, and saved Tutor conversations. A reader can permanently delete an individual Tutor conversation in the application; its saved turns are deleted with it. Other records remain until the reader changes or removes them, or requests account and data removal. OAuth access can be revoked through Google or GitHub. An invited tester may request account and data removal through the support address displayed on the Google sign-in consent screen.

Questions about this notice can be sent to the support address displayed on the Google sign-in consent screen.