BookGap · Legal
Privacy Policy
1. Who we are
BookGap is operated by Mustafa Mert Türkoğlu, an independent developer based in Türkiye and the controller of the data described here. Contact: [email protected].
2. What the extension reads
BookGap runs on supported Amazon book product and review pages. Opening the panel reads the current book’s identifier (ASIN), title, author and rating summary. Only starting an analysis collects one-, two- and three-star reviews.
The extension requests additional review pages from your browser using your existing Amazon session. We do not receive your Amazon password, cookies, orders or payment information. Collection stops when Amazon blocks access or shows a captcha.
Reviewer profile names, links and avatars are not collected. Review text itself may contain personal information written by its author; we cannot guarantee that every name in free-form text is removed.
3. What we process and store
- Browser identifier. The extension generates a random secret stored only in its local Chrome profile. It sends that identifier over HTTPS; our database keeps a keyed hash, not the secret. It is not an email address or an Amazon account identifier.
- Network identifier. Cloudflare and our server process your IP address to enforce fair use. Our analysis database stores only a keyed, daily-changing hash of the IPv4 address or IPv6 network prefix. People sharing an internet connection share a larger daily allowance of their own. This is pseudonymous data, not a guarantee of anonymity.
- Analysis input. The extension sends the book’s ASIN, title and author, and each review’s title, text, rating and “helpful” count. Review dates are not sent. The helpful count only weighs which reviews the report quotes as evidence. Raw review text is not stored in our database.
- Results and usage. We temporarily store your report so a repeated request can retrieve it without using a second allowance. We store the analysis time, status, request ID, protected browser/network identifiers and AI token counts for quota enforcement and abuse prevention.
- Support. If you email us, we receive your email address and whatever you include. We use that information to respond, not to subscribe you to marketing.
- Technical data. Our hosting and network providers process connection details for delivery and security. Application logs record operational events, not intentionally submitted review text or raw IP addresses.
4. Why we process it
We process inputs and results to provide the analysis you request. We use protected identifiers and usage records to enforce the daily limit, prevent abuse and control service costs. Where the GDPR applies, our bases are performance of the service agreement for requested analyses and legitimate interests for proportionate security, abuse prevention and support. We do not use reports or review data to train our own AI models.
5. Service providers
- Google’s paid Gemini API receives the submitted book/review content and generates the report. Under its paid-service terms, prompts and responses are not used to improve Google’s products; limited retention for abuse detection may still apply. BookGap being free to you does not mean we use Google’s unpaid API tier.
- Cloudflare carries and protects traffic, including review text in transit and IP addresses. See its privacy policy.
- Hostinger hosts the website, server and database in Germany.
No payment processor is used by this free release. We do not sell personal data or share it for advertising. We may disclose information when legally required.
6. Retention
- Reports are retrievable for up to 24 hours. An hourly cleanup removes stored report text after that window, normally within 25 hours of the analysis starting.
- Protected identifiers and analysis usage records are removed after 30 days by the same hourly cleanup, normally within 30 days and one hour.
- The random browser identifier and cached allowance stay in Chrome until you remove the extension or its local data. Removing them does not erase server records or reset your network’s allowance.
- Application logs rotate by size, with at most five 10 MB files per container; this is not a fixed number of days. Service providers apply their own retention policies.
- Support correspondence is kept as needed to resolve your request and meet any applicable legal obligations.
7. Your choices and rights
You can stop using BookGap or uninstall it at any time. You can ask to access, correct, export or delete personal data, or object to processing, by emailing [email protected]. Because no account is required, we may need information that lets us locate and verify your records; do not send your browser secret by email. We respond within applicable legal deadlines. You can also contact your local data protection authority, including the KVKK in Türkiye.
8. International processing and security
Our server is in Germany. Cloudflare routes traffic globally, and Google may process data in the United States and other countries. Provider terms describe the safeguards applicable to their processing. HTTPS protects data in transit; AI credentials remain on the server, never in the extension. No system is perfectly secure.
9. Website and children
The website sets no analytics or advertising cookies. Its sample reports are fictional and run in your browser without sending reviews to the API. BookGap is not directed to children under 18.
10. Amazon and policy changes
BookGap is independent of Amazon. Review text belongs to its authors. We will update this page when our practices change and announce material changes on the website or in the extension. Introducing any future paid offering would require a separate announcement and explicit agreement.
11. Contact
Mustafa Mert Türkoğlu · [email protected] · Türkiye