Skip to content

1 or 2 credits, some free · 1 credit is about $1

pocketshelf

Privacy

Last updated

We collect what we need to sign you in, sell you credits and deliver your files. If you say yes, we also count visits and measure our Google ads with Google Analytics. Nothing else.

What we collect

  • Your email address, to sign you in and to send you account confirmation and password reset emails.
  • Your credit ledger, unlocks, downloads, wishlist, follows and reviews, so the store works.
  • Payment records (amount, product, provider reference). Card details go to our payment provider and never touch our servers.
  • IP addresses, only as salted hashes, to rate-limit abuse and count downloads fairly.
  • If you tick the box next to a free item, your email for the newsletter. It is unchecked by default and you can turn it off in settings.

Cookies

We set your sign-in session cookie, which the site cannot work without, and a cookie called ps_consent that remembers your analytics choice for 12 months. Analytics and ad-measurement cookies are only set if you choose Allow analytics. Nothing is pre-ticked, and saying no changes nothing else on the site.

We remember your light or dark theme choice in your browser storage. It never leaves your device.

Analytics

If you choose Allow analytics, we load Google Analytics and Google Ads conversion measurement. They set these cookies: _ga, _ga_<ID> (up to 14 months), and Google Ads' _gcl_au (up to 90 days), plus _gcl_aw and other _gcl_ cookies if you arrived from one of our ads. We use them to measure whether our ads lead to sign-ups, unlocks and purchases. We also set one short-lived cookie of our own, ps_login, for 30 seconds after you sign in. It holds only the sign-in method (email, Google or GitHub), is only set after you allowed analytics, and deletes itself when read. Google Analytics records which pages you visit, what you search for on Pocketshelf, which items you view, unlock and download, and the device, browser and rough location (country and city) your visit comes from. If you are signed in, it gets a scrambled version of your account number, never your email or name. If you allowed analytics when you started a checkout, our server also tells Google about the purchase (the product and the amount, never your card or email) and about any refund of it. We turned off Google signals and ad personalization. We do not use remarketing, and we do not share audiences or your data with Google for ad targeting. Google Ads only learns which ad click led to a sign-up, an unlock, a newsletter sign-up or a purchase (and its amount). It never gets your name or email. Google Analytics keeps this data for 14 months. You can change your choice any time with Cookie settings in the footer. A change you make after starting a checkout applies from your next visit. If you ask us to delete your account, we also ask Google to delete the analytics data tied to it.

The wheel

None of this is set until you press Spin or Not now. When you press Spin, we set two first-party cookies for up to 30 days: ps_vid, a random visitor number, and ps_spin, which holds only the number of your spin, so your prize stays yours and you cannot spin twice. We also keep a random device number in your browser storage (ps_device). If you press Not now, we keep a note that you did (ps_wheel_dismissed), and that is the only thing stored in that case.

When you confirm your email or sign in, we set one more first-party cookie, ps_flash, that lasts 30 seconds and deletes itself when read. It only lets us tell you what landed in your wallet.

To limit spins per network we keep a hashed form of the first part of your network address, never the address itself. We delete that hash after 48 hours. Spin records that nobody claimed are anonymised after 30 days. We use these only for the wheel, never for analytics, advertising or tracking across sites, and we do not share them with anyone. If your browser blocks cookies or storage, the wheel still works with the network limit, and signing up still gets you the free credit.

Who sees your data

Our database and hosting provider, our payment provider (Creem, our merchant of record), our email delivery provider and, only if you allow analytics, Google (Google Analytics and Google Ads measurement) process data for us under their own terms. We do not sell your data. If you allow analytics, we use Google Ads cookies to measure our ads, never for remarketing or ad personalization.

Your choices

You can ask us to export or delete your account and its data by emailing support@pocketshelf.store. Purchase records we must keep for accounting are kept for the period the law requires.