Skip to content

New: ask our AI book concierge

Sofiya.

Privacy policy

Last updated October 28, 2026

Sofiya Bookstore (sofiya.store) is a portfolio project. This page explains what we collect when you use the site, why, and what you can ask us to do with it.

What we collect

  • Account: your name, email address, sign-up date and reading points. Your password is stored only as a secure hash; nobody can read it.
  • Continue with Google: your name, email address and Google account ID. We never see your Google password.
  • Orders: the books, prices, currency, payment method and payment status. Card payments are handled by Toss Payments; we keep only the payment reference and receipt link, never your card details. We don’t ask for a delivery address, because nothing is shipped.
  • Reviews and your wishlist, if you create them.
  • Newsletter: your email address, if you subscribe.
  • Ask Sofiya: your questions are sent to Google Gemini to write the answer. We keep the text of questions, without who asked, to improve answers. Please don’t put personal information in your questions.
  • Technical data: your IP address is used for a few minutes to limit repeated attempts (for example, wrong passwords). It is not saved with your account.

Cookies and browser storage

We use only the cookies the site needs: sofiya_session keeps you signed in, sofiya_google is used for a few minutes during Google sign-in, and sofiya_locale and sofiya_currency remember your language and currency.

Your basket and recently viewed books are kept in your own browser. We use no advertising or tracking cookies and no analytics.

Services we use

Google Cloud hosts the site (Seoul region), Neon stores the database, Toss Payments processes card payments, Resend sends our emails, and Google provides sign-in and the Gemini AI. Each only gets the data it needs to do that job.

How long we keep data

Account data is kept while your account exists. Order records are kept as long as needed for accounting. Email confirmation and password reset links expire and are stored only as hashes.

Your choices

You can change your name and password in your account settings. To get a copy of your data, correct it, delete your account or leave the newsletter, email hello@sofiya.store and we will reply within 30 days.

Contact

Questions about this policy: hello@sofiya.store.