Privacy Policy

This policy explains how Quarlabs ("we", "us") collects, uses, and protects your personal data when you use Nook. We handle personal data in line with the principles of Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486).

1. What we collect

• Account data: email address, name, and a hashed (encrypted) password — or the equivalent identifier if you sign in with Google.
• Technical & usage data: IP address, browser type (user-agent), language/region preferences, and website analytics.
• Report data: the content, reason, and IP you submit when reporting an article (used to prevent abuse).
• Reading history & bookmarks (optional, account-only): if you turn on Reading history in Settings, we record the articles you open; bookmarks are saved when you choose to save a story. Both require an account, are stored only on our server (never in your browser), and are off/empty by default.

2. How we use it

• To provide and maintain accounts, sign-in, and (future) subscriptions;
• To send sign-in links and account-related emails;
• To provide reading history and bookmarks once you enable or use them;
• For security, abuse prevention, and detecting violations;
• To understand usage and improve the Service (analytics).

3. Third-party processors & cross-border transfer

We share some data with trusted service providers, including Neon (database), Vercel (hosting), Resend (email), Google (analytics & sign-in), and Cloudflare (bot verification). Some providers' servers are located outside Hong Kong, so your data may be transferred and processed abroad. We share data only as needed to run the Service and we do not sell your personal data.

4. Cookies & local storage

We use cookies and browser local storage to keep you signed in, remember your language/region and disclaimer acknowledgement, and to run Google Analytics. You can manage or delete cookies in your browser settings. Reading history and bookmarks are not stored in cookies or local storage — they are kept only on our server and linked to your account.

5. Retention

We keep personal data only for as long as needed for the purposes above. When you delete your account, or the data is no longer needed, we delete or anonymise it.

Reading history is off by default. When you turn it on, you choose how long entries are kept — 7, 30, 90 days, or forever — in Settings, and you can clear your history or switch it off at any time, which deletes it immediately. Bookmarks are kept until you remove them or delete your account.

6. Security

We use reasonable technical and organisational measures to protect personal data (for example, encrypted transport and password hashing). No internet transmission can be guaranteed perfectly secure.

7. Your rights (access & correction)

Under the Personal Data (Privacy) Ordinance you have the right to access and correct the personal data we hold about you. To make a request, email support@quarlabs.com.

8. Children

The Service is designed for families to use together, and accounts should be created and managed by a parent/guardian. We do not knowingly collect personal data from children without parental consent.

9. Changes

We may update this policy from time to time; updates are posted on this page.

For any privacy questions or requests, contact support@quarlabs.com.