BookGap · Legal
Privacy Policy
1. Who we are
BookGap is operated by Mustafa Mert Türkoğlu, an independent developer based in Türkiye and the controller of the data described here. Contact: [email protected].
2. What the extension reads
BookGap runs on supported Amazon book product and review pages. Opening the panel reads the current book’s identifier (ASIN), title, author and rating summary. Only starting an analysis collects one-, two- and three-star reviews.
The extension requests additional review pages from your browser using your existing Amazon session. We do not receive your Amazon password, cookies, orders or payment information. Collection stops when Amazon blocks access or shows a captcha.
Reviewer profile names, links and avatars are not collected. Review text itself may contain personal information written by its author; we cannot guarantee that every name in free-form text is removed.
3. What we process and store
- Browser identifier. The extension generates a random secret stored only in its local Chrome profile. It sends that identifier over HTTPS; our database keeps a keyed hash, not the secret. It is not an email address or an Amazon account identifier.
- Google account, if you sign in. Signing in is optional. “Continue with Google” opens Google’s own sign-in window, so we never see your Google password. BookGap asks Google only for the “openid” scope, which means all we receive is the permanent number Google assigns to your account for BookGap (its “subject” identifier), not your email address, name or picture. Google’s answer returns through our server at api.bookgap.app to the extension. We keep a keyed hash of that number, linked to your browser identifier, so the larger allowance follows your account on every browser you sign in on. Analysis records carry that hash only for the UTC day of the analysis; it is erased from them once that day is over.
- Network identifier. Cloudflare and our server process your IP address to enforce fair use. Our analysis database stores only a keyed, daily-changing hash of the IPv4 address or IPv6 network prefix, and overwrites it once that UTC day is over, because it is only ever compared within the same day. This is pseudonymous data, not a guarantee of anonymity.
- Analysis input. The extension sends the book’s ASIN, title and author, and each review’s title, text, rating and “helpful” count. Review dates are not sent. The helpful count only weighs which reviews the report quotes as evidence. Raw review text is not stored in our database.
- Results and usage. We temporarily store your report so a repeated request can retrieve it without using a second allowance. We store the analysis time, status, request ID, protected browser, network and account identifiers and AI token counts for quota enforcement and abuse prevention.
- Support. If you email us, we receive your email address and whatever you include. We use that information to respond, not to subscribe you to marketing.
- Technical data. Our hosting and network providers process connection details for delivery and security. Application logs record operational events, not intentionally submitted review text or raw IP addresses.
4. Why we process it
We process inputs and results to provide the analysis you request. We use protected identifiers, including the account identifier when you sign in, and usage records to enforce the daily limits, prevent abuse and control service costs. Where the GDPR applies, our bases are performance of the service agreement for requested analyses and legitimate interests for proportionate security, abuse prevention and support. We do not use reports or review data to train our own AI models.
5. Service providers
- A review-sorting model service receives the review text only to decide, per review, whether it is about the book’s content or about shipping, packaging, printing, the file, the price or the seller. It writes no part of the report. If it cannot answer, BookGap falls back to its own built-in word lists and the analysis continues.
- A paid large-language-model service receives the submitted book and review content and generates the report. Under the paid terms that apply to us, prompts and responses are not used to improve that provider’s products; limited retention for abuse detection may still apply. BookGap being free to you does not mean we use an unpaid AI tier.
- Both AI services are commercial providers that may process the text outside Türkiye, and neither receives your browser identifier, your IP address or any account of yours. We treat which providers we use as business information, but we will name the current ones if you ask: write to [email protected].
- Google provides the optional sign-in. Google handles the sign-in under its own privacy policy and tells us only the account number described above.
- Cloudflare carries and protects traffic, including review text in transit and IP addresses. See its privacy policy.
- Hostinger hosts the website, server and database in Germany.
No payment processor is used by this free release. We do not sell personal data or share it for advertising. We may disclose information when legally required.
6. Retention
- Reports are retrievable for up to 24 hours. An hourly cleanup removes stored report text after that window, normally within 25 hours of the analysis starting.
- Protected identifiers and analysis usage records are removed after 30 days by the same hourly cleanup, normally within 30 days and one hour.
- The link between your browser identifier and your Google account identifier lasts until you sign out, which deletes it at once, or until it has gone unused for 30 days.
- The random browser identifier and cached allowance stay in Chrome until you remove the extension or its local data. Removing them does not erase server records or reset the daily limits.
- Your most recent report is kept in the extension’s session storage so it survives switching tabs and closing the panel. Chrome clears it when you close the browser, and starting a new analysis replaces it. Only BookGap’s own pages can read it; the script that runs on Amazon cannot.
- Application logs rotate by size, with at most five 10 MB files per container; this is not a fixed number of days. Service providers apply their own retention policies.
- Support correspondence is kept as needed to resolve your request and meet any applicable legal obligations.
7. Your choices and rights
You can stop using BookGap or uninstall it at any time. You can ask to access, correct, export or delete personal data, or object to processing, by emailing [email protected]. Because signing in is optional and we hold no email address, we may need information that lets us locate and verify your records; do not send your browser secret by email. Signing out in BookGap deletes the link to your Google account at once, and you can remove BookGap from your Google Account’s third-party connections at any time. We respond within applicable legal deadlines. You can also contact your local data protection authority, including the KVKK in Türkiye.
8. International processing and security
Our server is in Germany. Cloudflare routes traffic globally, and our AI service providers and Google’s sign-in service may process data in the United States and other countries. Provider terms describe the safeguards applicable to their processing. HTTPS protects data in transit; AI credentials remain on the server, never in the extension. No system is perfectly secure.
9. Website and children
The website sets no analytics or advertising cookies. Its sample reports are fictional and run in your browser without sending reviews to the API. BookGap is not directed to children under 18.
10. Amazon and policy changes
BookGap is independent of Amazon. Review text belongs to its authors. We will update this page when our practices change and announce material changes on the website or in the extension. Introducing any future paid offering would require a separate announcement and explicit agreement.
11. Contact
Mustafa Mert Türkoğlu · [email protected] · Türkiye