1. Controller
This Privacy Policy applies to the Android app Bookielist.
Roll & Render Studio
Rafael Meier
Am Anschlag 10
58553 Halver
Germany
Email: contact@rollandrender.studio
2. Core Principle: Local Data Storage
Bookielist is fully usable offline. All personal library data is stored exclusively on your device.
Ownership status, reading status, and notes do not leave your device automatically.
3. What data is stored?
- Book data: title, author, ISBN/EAN, cover URL, publisher (if available)
- Series data: series name and volume number (if available or added by you)
- Status data: ownership status (owned / wishlist), reading status (unread / started / finished / stopped)
- Metadata: timestamps for creation and last update
- Custom cover images: cover photos you capture or select yourself when you explicitly set them
- App settings: selected mood mode
The data is stored locally on your device.
4. Online Search and Cover Requests
When using online search or automatic metadata lookup, requests may be sent to external APIs (Google Books API, Open Library API).
Only the search term is transmitted, for example a title or ISBN, not your user profile.
External privacy information:
Google Privacy Policy
Open Library / Internet Archive
When loading external cover images, your IP address may technically be transmitted to the respective image server.
If you use your own cover photo for a book instead, that image remains exclusively on your device and is not transferred to Roll & Render Studio, the community cache, or external book sources.
5. Bookielist Community Cache and Optional Series Sharing
Bookielist uses an optional anonymous community metadata cache (Cloudflare Workers / KV) to speed up matches.
If you fill in missing series information in the book details, you can also share the series name and volume number anonymously with the community. This only happens when you actively trigger that share action.
What is transmitted?
- ISBN/EAN
- Book title
- Author
- Cover URL
- Optional: series name and volume number if you actively share them with the community
- Source of the data, for example Google Books, Open Library, or manual entry
What is not transmitted?
- Name, username, or account data
- Ownership status or reading status
- Notes or other personal library content
- Self-captured cover photos
- Personal activity logs
- Device identifiers generated by the application
Hosting: Cloudflare, Inc. (USA). Cloudflare is certified under the EU-US Data Privacy Framework. More information: Cloudflare Privacy Policy
Legal basis for users in the EEA: Article 6(1)(f) GDPR (legitimate interest in faster metadata recognition). Where you actively share series information with the community, that transfer also happens as a direct result of your deliberate user action.
6. Backup and Export (Import / Export)
- Export only happens on user initiative
- The storage location is chosen by the user
- No automatic cloud transfer
- Import only reads files that are provided locally
Bookielist does not transfer personal backup data to its own cloud.
7. Sharing your Wishlist and Redirect to Thalia
You can create a personal wishlist in the app and share it via a link. Sharing only happens on your initiative.
How does sharing work?
- The wishlist is embedded as Base64-encoded text in the URL (e.g.
rollandrender.studio/bookielist/wishlist?data=...) - The link may optionally include an anonymous list ID for social sync (e.g.
&listID=...) - The book data contained in the link (title, author, ISBN) remains in the link itself; anyone who receives the link can view this information
Wishlist Social Sync (optional)
If you share a wishlist with social sync enabled, the purchase status of individual books is synchronized via an anonymous Cloudflare Worker. This allows multiple people who receive the link to mark which books have already been purchased.
- No server-side storage of book data (title, author, ISBN) takes place
- Only the anonymous list ID and the ISBNs of books marked as "purchased" are stored
- Removed books are marked as deleted for 14 days (tombstone) so the purchase status remains synchronized for recipients
- No user profiles, names, or device identifiers are collected
- Sync only happens when the link contains a list ID and a recipient actively checks a box
Hosting: Cloudflare, Inc. (USA). Cloudflare is certified under the EU-US Data Privacy Framework. More information: Cloudflare Privacy Policy
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in providing shared wishlist functionality). Storage is anonymous and limited to the duration of technical provision.
What data is in the link?
- Book title
- Author
- ISBN/EAN
Redirect to Thalia
When you or a recipient of your wishlist link taps "Buy on Thalia", you are redirected to Thalia.de. The ISBN of the respective book is passed as a search parameter.
Affiliate Links
When you or a recipient of your wishlist link taps "Buy on Thalia", you are redirected to Thalia.de. These are affiliate links (partner program). In addition to the book's ISBN, a unique partner ID from Roll & Render Studio and a temporary click timestamp are transmitted.
This serves exclusively to assign potential purchases to our app and receive a referral commission. Thalia or the affiliate network used may set cookies or temporary IDs to track the purchase process.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in commercial financing and economic operation of the app).
Thalia is an independent third-party provider. Data processing there is subject to the privacy policy of Thalia Bücher GmbH.
8. Purchases via Google Play Billing
Purchases are processed via Google Play Billing. Google may process its own data for this purpose, including your Google account and payment information, in accordance with Google's own privacy policies and terms.
Roll & Render Studio does not view, process, or store full payment details.
In order for the app to recognize whether the purchase is unlocked, the purchase status is stored locally on your device.
9. No User Accounts
Bookielist does not require registration, an account, or an email address to use the app.
10. No Tracking, No Advertising
- No analytics tracking inside the app
- No ad banners, no video ads, etc.
- No marketing SDKs or profiling
- No hidden follow-up costs after the initial purchase
11. Camera Permission (Barcode Scanner)
The camera is only used when you actively open the scanner. No photos or videos are stored.
12. Deletion of Data
You can remove data at any time by:
- Deleting individual books inside the app
- Clearing the app storage in Android
- Uninstalling the app (removes local data)
Note on the cloud cache: it does not contain user-related records, so no person-specific deletion is required there.
13. Your Rights
You may have rights of access, rectification, erasure, and data portability under applicable law.
Contact for privacy-related requests: contact@rollandrender.studio
14. Changes to this Privacy Policy
This Privacy Policy may be updated with new app versions. The current version is available at this URL.
Last updated: June 2026 (wishlist social sync added).