Privacy policy

Book Artisan is built so that there is almost nothing to say here: the application works on your machine, keeps your book there and sends nothing anywhere. What follows is the detail, including the few things this website does.

Last updated 28 September 2026.

In short

  • The application does not collect anything about you and does not contact any server, ours or anyone else's.
  • You do not need an account for the application itself, and there is no telemetry and no usage reporting.
  • Your book stays in the folder you chose for it.
  • This website sets no cookies, which is why it shows no consent banner.
  • The personal data we see is what is needed to deliver a licence you bought, and the address you use to ask for a trial.

1. Who is responsible

The data controller is Miguel A. Gabriel, an individual developer established in Spain, reachable at [email protected].

2. The application

  • It does not send anything. The application contains no telemetry, no analytics and no update check. It opens and works with the network unavailable, and there is no online check to use a licence.
  • Your manuscript never leaves your machine. It is not uploaded anywhere, and no service is contacted while you write, preview or generate a book.
  • No account. Downloading and using the application requires no registration and no personal data. Asking for a trial is the one thing that needs an address, and asking for one is optional: Basic mode needs nothing.
  • A Pro key is verified locally, against a public key built into the application. No licence server is contacted, so the key cannot be, and is not, reported to us. The key carries, inside its signed payload, the address it was issued to — that is what tells us whose key it is and lets us re-issue one that is lost — and it goes nowhere.
  • The trial is issued, not self-declared. Asking for one requires an address, so the key can be sent to it and so that one address cannot keep asking: receiving the mail is what shows the address is yours, and the request is recorded as a salted SHA-256 — not the address — for a year. The plain address is deleted as soon as the key has gone out. It is never matched against anything you buy, and the application still sends nothing anywhere.
  • If you click a link in the user guide, it opens in your own browser, which then fetches that page on your behalf.

3. What the application stores on your machine

You can delete any of it without asking us, and the application rebuilds what it needs:

  • Your project folder, wherever you chose to put it: your Markdown files, the images, the project settings, and the books you generate.
  • Your settings, in config.yaml inside your user configuration directory (~/.config/bookartisan/ on Linux). This holds your preferences and the Pro key if you have one.
  • The list of recent projects — up to ten folder paths — kept in the application's settings file (bookartisan.conf) in the same directory, so the Recent menu survives a restart. You can clear it from that menu.
  • Generation logs, only if you switch them on: a .log file written next to each generated book, describing the run. Off by default, and you can delete the files at any time.

4. This website

  • No cookies and no tracking. The site stores nothing on your device, so no consent banner is needed.
  • Aggregate statistics. The site uses Cloudflare Web Analytics, which reports page views, referrers, country and device type in aggregate. It uses no cookies and no fingerprinting, does not follow you across sites, and does not store your IP address. It supports no custom events, so nothing about your visit is enriched by us.
  • Hosting. The site and the downloads are served through Cloudflare, which processes connection data — including IP addresses — to deliver the content and to protect against abuse. That is what any host does, and it is Cloudflare's processing, not a profile we build.
  • Download counts are file counts. How many times a file has been downloaded is published as a number, with no link to who downloaded it.

5. Purchases

A Pro licence is bought through a store that acts as merchant of record. The store — not this website — collects your payment details, issues the invoice and handles the applicable taxes, under its own privacy policy. From the store we receive what is needed to deliver your licence: an e-mail address, an order reference and the product bought. Nothing else, and nothing about your card.

6. Why we process data, and on what basis

WhatWhyBasis
E-mail address and order reference from the storeTo send you the licence key and to answer a support request about itPerformance of a contract
Address given to ask for a trialTo send the trial key, and to recognise that this address has already had one; kept as a salted hash, not as the addressConsent, and legitimate interest in preventing repeated trials
Aggregate website statisticsTo know which pages are read, so the site can be improvedLegitimate interest, in a form that is not linked to you
Server logs at the hostTo serve pages and downloads and to stop abuseLegitimate interest in keeping the service available
Accounting records of a saleTo comply with tax and commercial obligationsLegal obligation

7. Who else is involved

Three providers, and only for what they do:

  • Cloudflare — hosting of the site and of the file storage, and the aggregate statistics described above.
  • The mail provider — takes the address you ask a trial with and delivers that one message; it is a mail delivery service and is given nothing else.
  • The store — the checkout, the payment, the invoice and the tax. It is the merchant of record for your purchase and has its own privacy policy, which is shown to you before you pay.

Your manuscript, your projects and your settings are never shared with any of them, because they never reach us in the first place.

8. Transfers outside the European Economic Area

Cloudflare, any mail provider and any store may process data in the United States. Where they do, the transfer relies on the safeguards those providers put in place for it — the European Commission's adequacy decision for the EU–US Data Privacy Framework where it applies, and standard contractual clauses otherwise. Ask us and we will tell you which one is in force for a given provider.

9. How long we keep things

  • Aggregate website statistics: as long as the analytics provider retains them (Cloudflare keeps a rolling window of about six months).
  • Order and support correspondence: while it is needed for support, and the accounting records for as long as tax law requires.
  • A trial request: the scrambled record that stops one address asking repeatedly is kept for a year; the address itself is deleted as soon as the key has gone out.
  • Anything stored on your own machine: until you delete it. It is yours and it is not a copy we hold.

10. Your rights

If you are in the European Union, or anywhere else with a comparable law, you may ask us to:

  • show you the personal data we hold about you, and give you a copy;
  • correct it if it is wrong;
  • delete it, where we are not obliged to keep it;
  • restrict or object to how we use it, including the statistics;
  • send it to you, or to another provider, in a portable form.

Write to [email protected] and we will answer within a month. If you think we have handled your data badly, you may complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in the country where you live.

11. Children

Book Artisan is not aimed at children and we do not knowingly collect data from them.

12. Changes to this policy

If the policy changes, the date at the top changes with it. Anything that affects you materially will be announced on this page, and — for as long as it is the only one we have — at the address you used to buy a licence.

13. Contact

Miguel A. Gabriel — [email protected]