Your data, plainly
Privacy policy.
Short version: we ask for as little as possible, we never sell or share your data with third parties for their own purposes, and our analytics run without cookies.
Who is responsible
Beachread is operated by Record Scratch OÜ (registry code 17013739), Narva mnt 5, 10117 Tallinn, Estonia. We are the data controller. For anything privacy-related, write to contact@rcrdscrtch.com.
What we collect
Waitlist. Your email address and, if you tell us, your city, so we can let you know when Beachread opens near you.
Membership and account data. Your name, email address, city, the books you add, and the groups you join. Payments for memberships are handled by our payment provider; we never see or store your full card details.
Product analytics. Aggregated usage and performance events — pages viewed, features used, errors encountered — collected through PostHog.
Why we collect it
To run the club: matching you with readers, arranging meet-ups, and managing your membership (performance of our contract with you). To keep the product working and improve it (legitimate interest in a functioning, well-made service). To email you about a launch in your city when you ask us to (consent, withdrawable at any time via the unsubscribe link).
We never share it with third parties
We do not sell, rent, or trade your personal data, and we do not share it with third parties for their own purposes — no advertising networks, no data brokers, no list swaps.
The only outside companies that touch your data are the service providers we need to operate Beachread — hosting, email delivery, payment processing, and PostHog for analytics. They act as processors on our written instructions, may use the data only to provide their service to us, and process it inside the EU/EEA or under an adequacy decision or Standard Contractual Clauses. Other members see only what you choose to show them: your first name, city, and the books you add.
We may disclose data where the law compels us to, for example a valid order from a competent authority.
Analytics without cookies
PostHog is configured in cookieless mode with memory-only persistence, hosted in the EU. It does not store an identifier on your device and we do not use it to build advertising profiles. That is also why you never see a cookie banner here; see our cookie policy.
How long we keep it
Waitlist emails: until your city opens or you unsubscribe, and no longer than three years after your last interaction. Membership and account data: for the life of your account, then up to six months after closure, except records we must retain for accounting and tax purposes (seven years under Estonian law). Analytics events: in aggregated form, up to twenty-four months.
Your rights
Under the GDPR you can ask us for a copy of your data, correct it, delete it, receive it in a portable format, restrict or object to how we use it, and withdraw consent at any time. Email us and we will answer within one month.
If you think we have handled your data badly, you can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, or to the supervisory authority in your own country.
Children
Beachread is intended for readers aged 16 and over. We do not knowingly collect data from children.
Changes
If we change how we handle data, we will update this page and, for anything material, tell members by email before it takes effect.
