Privacy
What Minerva keeps, and who can see it.
What is kept
Your name, a username, your email address, a hashed password, and your time zone. Then whatever you put in: the books on your shelves, the days you logged and what you wrote beside them, your ratings and reviews, your lists, and who you follow.
Who can see what
A new account starts followers only and findable by name. Readers you let follow you can see the books you have finished, with your rating and review, and your year pages. Nobody else can. Friends can find you by name, username, or email in reader search unless you switch that off. Both settings are yours, under Settings → Privacy.
Your reading log is never shared, whatever your settings say: not the days, not the page counts, not the notes, and not why you set a book aside. Neither is your email address.
Your email
It is used to sign you in and to send a password reset when you ask for one. Nothing else is sent to it.
In your browser
One cookie, which keeps you signed in. Two small settings kept on this device: which color scheme you chose, and whether this browser has signed in before, so the app knows which page to open. No analytics, no advertising, and no code from anyone else runs on these pages.
On your phone
The app keeps your sign-in in the phone's keychain, days you logged while offline until they are sent, the book shown in the home screen widget, and your color scheme. Signing out clears all of it except the color scheme. The camera is used only to read a book's barcode; no photo is kept or sent. If you turn on notifications, a notification address for this phone is stored with your account until you sign out, and messages are delivered through Expo's push service and Apple or Google. Reading reminders are scheduled on the phone itself. No analytics and no advertising.
Taking it with you
Everything you have logged can be exported as a file from Settings → Import and export.
Deleting your Minerva account
In the Minerva app or on minervatracker.com, sign in and go to Settings → Account → Delete my account, then enter your password. It takes effect at once.
Deleted: your profile, email, and password; your shelves, ratings, reviews, lists, and reading log; who you follow and who follows you; book clubs you started and your place in others; recommendations you sent or received; and your notifications.
Kept: any report you made about another reader, with your name removed. Database backups hold a copy for up to 7 days and server logs for up to 30 days, then they are gone.
Can't sign in? Reset your password from the sign-in page, then delete as above.