Privacy Policy
Last updated: 25 October 2026
Who we are
Read the Room (readtheroom.pub) is run by [YOUR FULL NAME], [INDIVIDUAL ACTIVITY CERTIFICATE NO.], Lithuania. We are the data controller for the personal data described here. Contact: [hello@readtheroom.pub].
The short version
- We do not keep your photo. It is sent to our AI provider to make your reading and then discarded by us.
- We do not need an account, and we do not sell your data.
- We keep a short-lived record of your IP address to count your free daily readings.
What we collect and why
Your photo and optional note. When you press Read the room, your photo (reduced in size on your device first) and any note you type are sent to our server and passed to Anthropic, our AI provider, to produce your book recommendations. We do not store the photo or note on our servers. Legal basis: performing the service you asked for (GDPR Art. 6(1)(b)).
Your IP address. We store your IP address together with the date and a count of readings for up to 48 hours, to enforce the free daily limit and prevent abuse. Legal basis: our legitimate interest in keeping the service available and affordable (Art. 6(1)(f)).
Technical logs. Our hosting provider, Cloudflare, processes connection data such as IP address, browser type and time of request to deliver the site and protect it from attacks.
Purchases. If you buy readings, payment is handled by our payment provider, [PAYMENT PROVIDER], which acts as the seller of record. We receive your email address and order details, not your card details. Legal basis: contract (Art. 6(1)(b)) and legal obligations such as tax records (Art. 6(1)(c)).
Your share card is created on your own device. We do not receive it.
Who processes your data for us
- Anthropic PBC (USA): analyses your photo. Under its API terms, Anthropic deletes inputs and outputs within 30 days, except where it must keep them longer to enforce its usage policy or comply with law.
- Cloudflare, Inc. (USA): hosting, security and the daily-limit counter.
- Google (USA): serves the website font, which means your browser connects to Google's servers.
- [PAYMENT PROVIDER]: payments, if you buy readings.
Some of these providers are in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep it
- Photo and note: not stored by us.
- IP address and daily count: up to 48 hours.
- Purchase records: as long as tax law requires (in Lithuania, generally 10 years).
Your rights
You can ask us to access, correct or delete your personal data, restrict or object to its processing, or receive a copy of it. Write to [hello@readtheroom.pub]. You can also complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or the data protection authority where you live.
Children
Read the Room is not intended for children under 16. Please do not upload photos of other people without their permission.
Cookies
We do not use advertising or analytics cookies. If that changes, we will ask for your consent first and update this page.
Changes
If we change this policy, we will update the date at the top of this page.