Privacy policy

Who is responsible for your data

Each library in the AnarBib network is data controller for the data of its readers in the sense of GDPR (article 4.7) and Brazilian LGPD (article 5, VI). AnarBib, as a technical system operated by the Centro de Cultura Libertária da Amazônia (CCLA), acts as data processor on behalf of the libraries — it provides the tool but does not decide how the data is used. Contact details for each adherent library are available on that library's page. For technical questions about the AnarBib system itself, you can write to contato@anarbib.org.

What data AnarBib collects

Data collection is limited to the minimum necessary for the library to function:

• Your email address (for communications regarding loans and reservations)
• Your public identifier (login of your choice)
• Your password, stored only in encrypted form (bcrypt hash) — never in plaintext, not even librarians can see it
• Your first name or pseudonym, both optional
• The history of your loans and reservations at the library
• Your preferred interface language
• The list of network libraries you are a member of
• Your phone number, only if you choose to provide it (optional)
• Your postal address, only if you choose to provide it (optional)

The following data is NOT collected by AnarBib:

• Date of birth
• Profession, gender, nationality, origin
• Third-party tracking cookies
• Behavioral analytics tools (Google Analytics, Meta pixels, etc.)

Why this data is collected

Data is collected solely to enable the library to function: managing your account, recording loans and reservations, and communicating with you about those operations (availability of a reserved book, return reminders, etc.). No other use is made of it. In particular: no marketing, no behavioral analysis, no profiling.

How long we keep your data

We apply the data minimization principle (GDPR article 5(1)(e), LGPD article 6): no data is kept beyond the time strictly necessary. The default retention durations of the AnarBib network are as follows:

• Completed loan history: 24 months after return
• Completed reservation history: 12 months after closure
• Completed on-site consultation history: 12 months after closure
• Read notifications: 90 days after reading
• Profile and registration data: kept as long as your account exists

These periods are applied automatically: once the deadline has passed, the data concerned is deleted. Each library may adopt shorter durations (or longer, by justified collective decision). The durations in force at your library may be indicated in the specific section below, if one has been published.

Your rights over your data

You have legal rights over your personal data, guaranteed by European GDPR and Brazilian LGPD:

• Right of access: see what data the library holds about you
• Right of rectification: correct inaccurate data
• Right to erasure ("right to be forgotten"): delete your account and your data
• Right to portability: download your data in a reusable format (.csv export available from your account)
• Right to object: refuse certain types of processing
• Right to restriction: request temporary suspension of the processing of your data

If you have an account, most of these rights can be exercised directly in the application, on your «My account» page (app.anarbib.org/conta). Otherwise, write to contato@anarbib.org or to your library.

Optional declared information

If, when creating your account, you gave us the name of a library that is not yet on AnarBib, this information is kept so that, if that library joins our network one day, we can offer you an attachment as a reader.

This information is not shared with any third party. It is readable only by the team that administers the AnarBib network. You can view, modify or delete this information at any time from your account (My data section).

Who your data is shared with

To operate technically, AnarBib uses three service providers (data processors in the GDPR sense):

• Supabase Inc. — database and authentication. Servers located in São Paulo (Brazil). Data Processing Agreement (DPA) signed on May 4, 2026, with the European Commission's Standard Contractual Clauses (decision 2021/914).
• Resend (Plus Five Five, Inc.), San Francisco, United States — sending of transactional notification e-mails. US company; sending metadata is stored in the United States. Transfer covered by the European Commission's standard contractual clauses (2021/914, module 2) and by Resend's EU-U.S. Data Privacy Framework certification. Open and click tracking disabled.
• Codeberg e.V. — hosting of the web interface (frontend). Servers in Germany (EU). German non-profit association.
• Cloudflare Turnstile — bot protection on the login and sign-up pages, to prevent automated attacks against accounts. It loads only on those two pages, does not track your browsing, and sets no advertising tracker. It is the one assumed exception to our self-hosting doctrine; the rest of the journey has no Cloudflare dependency.

Data is therefore transferred outside the European Union, to Supabase's servers in Brazil. This transfer is governed by the European Commission's Standard Contractual Clauses. Brazil has its own data protection law (LGPD), structurally close to GDPR.

For libraries that join the AnarBib network, a Data Processing Agreement (DPA) details the contractual responsibilities between each adhering library and AnarBib in compliance with Article 28 of the GDPR and Article 39 of the LGPD. View the DPA template.

Tutorial videos

Some video tutorials are hosted on kolektiva.media, a militant PeerTube instance. Out of respect for your privacy, these videos are not loaded automatically: nothing is sent to kolektiva.media until you click «Load the video». From that click on, kolektiva.media receives your IP address — like any site you visit — in order to deliver the video to you. We have disabled P2P sharing on these videos, so that your IP is not exposed to other viewers or to third-party servers.

How your data is protected

Technical measures implemented by AnarBib to protect your data:

• All communications are encrypted in transit (HTTPS/TLS)
• Passwords are stored in encrypted form (bcrypt), never in plaintext
• Data access is restricted by security rules in the database (PostgreSQL Row Level Security): each user only sees their own data; each library only sees the data of its readers
• Data collection is minimized by design: what is not collected cannot leak
• AnarBib's source code is public and auditable (AGPL-3.0 license)

Honestly: no system is perfectly secure. In the event of a data breach affecting your rights, you will be notified by email within the timeframe set by GDPR (72 hours after detection) and the competent supervisory authority will also be notified.

Position regarding requests from authorities

In the event of a request to disclose data from a judicial or police authority, AnarBib will respond only to what is strictly required by applicable law, and nothing more. Affected persons will be informed as soon as investigation secrecy permits. The first protection of your data remains the fact that it is not collected if it is not necessary — that is why minimization (section 2) is central to our design. The detailed procedure is described in the INCIDENT_RESPONSE.md document published in our repository.

Modifications to this policy

This policy may be modified to reflect technical or legal developments. Any significant modification will be communicated by email to affected persons. The full history of modifications is available in our public Codeberg repository, in docs/legal/PRIVACY_POLICY.md.

How to contact us

For any question about this policy or the processing of your data: contato@anarbib.org.

You can also contact the supervisory authority of your country (in France, CNIL — cnil.fr; in the UK, ICO — ico.org.uk; in Brazil, ANPD — gov.br/anpd; in Italy, Garante — garanteprivacy.it).