Privacy policy

Last updated 2 September 2026

Booktok is a marketplace where readers buy, sell and swap used books. It is operated by Goodir Technology. This page explains what we hold about you, why we hold it, who else sees it, and what happens when you ask us to erase it.

We do not sell your data, and we do not run advertising or third-party tracking on this site.

What we collect

When you create an account

• Your email address — to sign you in, to confirm the address is yours, and to send you the notifications described below.
• Your name, as you choose to display it. It is shown publicly beside your listings and in your messages.
• A profile photograph. This is required. Buyers here send money to strangers, and a face against a name is the plainest signal we can offer that an account belongs to a real person. It is shown publicly.
• Your city, optionally. It helps other readers find people near them. You can add or remove it at any time.
• Your phone number, optionally at signup and required at payment. See below.
• A password, stored only as an Argon2 hash. We cannot read it, and nobody here can tell you what it is.

If you sign in with Google or Facebook

We receive your email address, your name and, usually, your profile picture. We do not receive your contacts, your friends, your posts, or anything else, and we never store a token that would let us act on your behalf at that provider.

We only connect a provider account to an existing Booktok account when the provider tells us the email address has been verified. If it has not, we refuse and ask you to sign in with your password instead.

The picture is downloaded once, resized and stored by us. We do not hotlink to the provider, so no page on Booktok reports back to Google or Facebook that you were viewed.

When you list a book

• The title, author, condition, price, city and any description you write.
• Photographs of the copy. Location data is strippedfrom every image on upload — a phone photograph normally carries GPS coordinates, and publishing those beside somebody’s books would publish their home address.

When you buy

• Your phone number is sent to WaafiPay to take the payment. WaafiPay confirms the payment with you directly; we never see or store your PIN or your wallet credentials.
• We record the amount, the currency, the order it belongs to, and WaafiPay’s reply.

Automatically

• An activity log— signing in, listing, buying, dispatching, confirming, messaging and similar significant actions, with the IP address and browser that made them. It exists so we can answer “what happened to my account?” and so we can investigate a compromised one. It is deleted automatically after 180 days.
• Ordinary server logs, which are short-lived and are not kept in a database.
• A session cookie, so you stay signed in. It is the only cookie this site sets. There are no analytics or advertising cookies.

Who else sees it

Other people on Booktok

Your name, photograph, city, short bio, seller rating and join date are public, as are your active listings. Your email address is never shown to anyone.

When you place or receive an order, you and the other party can each see the other’s phone number. This is so a delivery can actually be arranged. If you would rather not share a number, do not enter one on your profile — you will still be asked for one at the moment of payment, because WaafiPay requires it.

Companies we use

• WaafiPay — takes payments. Receives your phone number and the amount.
• Cloudflare R2 — stores uploaded images.
• Resend — sends our email. Receives your address and the message.

Our servers are in Europe. Nobody else receives your data, and we do not sell or rent it to anyone.

Our staff

Booktok holds a buyer’s money until they confirm the book arrived, and a person here releases it. That means our staff can see orders, payments and payouts. They can read a private conversation between a buyer and a seller only when adjudicating a dispute about it, and every such read is recorded with who did it and when.

A member of staff may also, with your knowledge, act on your behalf to help with something — listing a book, say. Such a session is time-limited, recorded, and cannot pay, confirm a delivery, cancel an order, open a dispute, write a review, or change your password. Those remain yours alone.

How long we keep it

• Your account — until you ask us to erase it.
• The activity log — 180 days, then deleted automatically.
• Records of completed trades — orders, payments, payouts and the accounting entries behind them — permanently. See the next section for why.

Erasing your account

You can ask us to erase your account at any time, from your security settings, or by writing to the address below. If you signed in with Facebook you can also ask through Facebook, and this page explains how to check on a request.

When we action a request, we remove:

• your name, email address, phone number, city, bio and photograph;
• your password;
• any Google or Facebook connection, so the same account can never sign in again;
• every active session;
• your want-list and your notifications;
• and we take down any listing that has not been sold.

What we cannot remove is the record of trades that actually happened.An order, its payment and its payout are also the other party’s record of what they bought or were paid, and they are the accounting evidence behind money we held on somebody’s behalf. The same is true of a review you wrote about somebody else, of a message in a conversation the other person can still read, and of evidence submitted in a dispute. Those stay — but with your name and contact details removed, they no longer identify you.

For the same reason, we cannot erase an account while money is still in flight — an order not yet delivered, a payout not yet sent, a refund not yet paid, or an open dispute. Your request is not refused; it waits, and we action it as soon as the last of those is settled.

Erasing an account frees your email address, so you are welcome to sign up again later.

Your rights

You can see and correct most of what we hold from your account settings. You can ask for a copy of your data, ask us to correct something we hold, or ask us to erase your account, by writing to the address below. We will answer within 30 days.

Security

Passwords are hashed with Argon2. The site is served only over HTTPS. Sessions can be revoked from your security settings, and changing your password ends every other session. We will tell you by email when your password or email address changes.

Children

Booktok is not intended for children under 13, and we do not knowingly hold data about them. If you believe we do, write to us and we will remove it.

Changes

If we change this policy materially we will say so on the site and, where the change affects how we use what we already hold, by email.

Contact

Booktok is operated by Goodir Technology. Write to support@booktok.goodirtechnology.com about anything on this page, including a request to see, correct or erase your data.