Privacy

What docstobook stores, what it never sees, and everyone else involved.

Last updated 29 September 2026

The short version

Your documents, your pictures and your design never leave your computer. They are held by your own browser, not uploaded to us. If you make an account, the only thing we hold is your email address.

There is no analytics, no tracking, and no advertising on this site or in the tool. Not one third-party tracker.

Who is responsible

docstobook is run by Aleksander Nowak, as an individual. For anything on this page, including a request to see or delete what is held about you, write to support@docstobook.com.

What stays on your computer

docstobook is a tool that runs inside your browser. The document you are building — its text, its pictures, its layout and its styles — is kept by the browser on your own machine, using its local storage (IndexedDB), and in the folder on your disk you choose to save to. None of it is sent to us. We have no copy of your book and no way to read it.

This has a consequence worth knowing: clearing your browser's site data for docstobook deletes your work, in the same way emptying a folder would. Saving to a folder on your disk is what makes a document independent of the browser.

What an account stores

An account is optional — the tool works fully without one. If you make one, the record consists of:

That is the whole record. Accounts exist so that documents can be attached to a person when cloud storage arrives; today they identify you and nothing more.

Authentication is handled by Supabase, which stores the record above on our behalf. We do not sell it, share it, or use it to contact you other than to make sign-in work.

Signing in with Google

If you use “Continue with Google”, Google tells us your email address and basic profile information (your name and profile picture) so that an account can be made. We do not receive your Google password, and Google does not tell us anything else about your account.

Opening a document from Google Drive

This is the part people most want to understand, so it is worth being exact.

docstobook asks Google for a permission called drive.file. Google describes it as per-file access, and it works like this: we can only ever see a file that you yourself handed over, using Google's own file chooser. We cannot list your Drive, search it, browse your folders, or see any document you did not pick. The chooser belongs to Google, not to us — that is the mechanism that makes this limit real rather than a promise.

When you pick a document:

You can withdraw this at any time from your Google account permissions, without affecting your docstobook account.

The Apps Script route

docstobook can also pull from a Google Doc through a small script that you deploy in your own Google account. In that arrangement the endpoint address and the password you invent are stored in your browser and sent only to your own script. They never reach us.

Asking Claude

The Ask button sends a request to Claude, an AI model made by Anthropic, which proposes changes to your document's design. Nothing is sent unless you press it. When you do, what goes is: what you typed, your house rules, your document's current styles, and an outline of the document — each paragraph's type and its first 80 characters. The full text and the pictures are not sent.

The request passes through our server only to check that you are signed in and to count it against your monthly allowance; the count (how many requests, and how large) is what we keep. Claude's answer is a list of changes shown to you, and nothing in your document changes until you apply them. Claude never rewrites your text.

No analytics, and what cookies there are

There is no analytics service, no tag manager, no advertising pixel and no third-party tracker anywhere on this site or in the tool. This is checkable: the site is a handful of files and none of them contain one.

The browser's local storage is used for two ordinary things: keeping you signed in between visits, and remembering your own preferences — which panel you left open, which view you were in. These stay in your browser and are never sent anywhere.

Who else is involved

Running a website means a small number of other parties necessarily see something. All of them, in full:

WhoWhat they see
Hostinger
hosting
Ordinary server logs: IP address, time, which page was requested. Standard for any website.
Supabase
accounts
The account record described above, and the connection made when you sign in.
Google
sign-in and Drive
That you signed in, and which single document you chose to open. Google's own privacy policy applies to their side.
Anthropic
Claude, only when you press Ask
The request described under “Asking Claude”: what you typed, your house rules, your styles and an outline of the document. Anthropic's own privacy policy applies to their side.
Cloudflare
cdnjs
Your IP address, when the tool loads the PDF-reading library it uses to place PDFs on a page.

These providers may hold data outside your own country. Where that is so, they operate under the standard safeguards for such transfers.

Payments

docstobook does not currently take payments, and no payment details are collected anywhere. When that changes, it will be through a payment provider who handles card details directly — we will not see or store them — and this page will say so before it happens.

How long things are kept

Your account record is kept until you ask for it to be deleted. Server logs are kept for the short period our host retains them. Your documents are kept by your browser for as long as you keep them — we cannot delete them, because we do not have them.

What you can ask for

Write to support@docstobook.com and you can:

Deletion is honoured; it is one record. If you are in the UK or the EU and think this has been handled badly, you are entitled to complain to your national data protection authority.

Children

docstobook is a tool for professional publishing work and is not directed at children under 13, who should not make an account.

Changes

If this page changes in a way that matters, the date at the top changes with it, and anyone with an account is told before the change takes effect. It will not be changed quietly.