Effective October 1, 2026.
nook operates the nook website and iPhone app from the United States. Both use the same account and community data. For privacy, support or security questions, email usenookprotocol@gmail.com.
Information we collect
Your account and profile. We handle your username, account identifier, email address, display name, sign-in credentials or provider identifiers, and the profile details you choose to add. These may include a photo, biography, website and typed location. Registration asks for your birth date before account creation. A signed browser cookie holds an eligible declaration for up to 30 minutes so email, social and wallet signup use the same date. We save that private date with your account to enforce the minimum signup age and mature-content restrictions. You cannot change the recorded birthday in settings. If you made an error, contact us for review; do not create another account to evade age restrictions. An underage refusal stores only a temporary browser restriction for up to 24 hours, not the rejected birthday. Your email, sign-in details and birth date are not public profile fields. A typed location does not give nook access to your device's location.
When you use Apple or Google sign-in, we receive the account information and authorization that provider supplies. Apple may provide a private relay email address. We do not receive your Apple or Google password.
Content and activity. We store posts, replies, selected images, drafts, community information, memberships, follows, votes, saves, discussion subscriptions and notification preferences. We also handle reports, blocks, moderation decisions, support messages and information submitted for verification. Reading, community-interaction and Home feed display records support your history, recommendations and community statistics.
Payments. We keep the account or community associated with a purchase, product and transaction identifiers, purchase status and subscription dates. Stripe processes website payments. Apple processes App Store purchases when that payment option is available. Payment details entered in the provider's payment interface are handled by that provider; nook uses transaction records to provide access and handle renewals, cancellations, restores, refunds and disputes.
Wallets. Optional wallet features use a public address, network, public holdings and ownership-verification information. Linking a wallet requires proof through a supported wallet provider. Public-address lookup alone does not establish ownership. Wallet providers and blockchain-data services receive the information needed for the connection or lookup. Public blockchain activity can reveal financial information. Review the wallet's visibility setting before linking or publishing its address. Never give nook a private key or recovery phrase.
If you choose connected wallets as evidence for a Gold application, their addresses, networks and verification times are saved with the private application for you and authorized nook reviewers. Disconnecting a wallet later does not remove that submitted evidence; reviewers can see whether it is still connected. Account deletion removes the wallet evidence from live application records, subject to the backup lifecycle described below.
When native wallet pairing is available, it uses Reown and is limited to people aged 18 or older. nook checks a signed-in account's saved birthday before starting pairing. Signed-out users confirm they are adults, and nook checks the linked account's saved birthday before completing sign-in. nook does not send your birthday to Reown. Reown's connection infrastructure may process IP and wallet addresses, approximate region, client identifiers, encrypted messages and protocol or device metadata. See Reown's privacy policy. Native pairing is optional.
Technical information. Requests can include an IP address, browser or device information, session identifiers, request times, and diagnostic or security information. Cookies and local storage support sign-in, security, preferences, drafts and first-party community statistics. Blocking essential storage can prevent some features from working.
The iPhone app uses device Keychain storage for sessions and private deletion-recovery information. It also stores preferences and information needed to recover unfinished actions. Attaching a selected image does not require access to your entire photo library.
How we use it
We use information to run accounts and communities, display content, preserve drafts, enforce access and age restrictions, deliver requested notifications, recommend content within nook, provide purchased features, answer requests, prevent abuse and maintain the service. We also retain necessary records to resolve disputes and meet applicable obligations.
We do not sell personal information, rent member lists, or share personal information for cross-context behavioral advertising. We do not use third-party advertising pixels to follow you across other apps or websites. nook's own community statistics and recommendations still use the activity described above.
Who can access it
Public profiles and public-community content can be seen, copied and indexed outside nook. Restricted communities use access controls, but an authorized reader can still copy what they see. Restricted content is not an end-to-end encrypted conversation.
Support messages from the website and app may be analyzed by configured external AI services to suggest ticket summaries, categories and next steps for authorized staff. We remove common contact details and credentials before sending feedback, but automated redaction is imperfect. Reports flagged as sensitive are handled manually. AI suggestions do not execute changes or send replies; staff remain responsible for handling requests. Derived tickets are deleted when their original support messages are erased.
Community moderators can access information made available by their moderation tools. Authorized nook personnel may access information needed for support, safety, maintenance or investigation. Account credentials and private authentication details are not public community information.
We use service providers for hosting and databases, email, abuse prevention, authentication, payments and blockchain data. Current core services include Railway for hosting/database infrastructure, Resend for email, Cloudflare Turnstile for abuse prevention, Stripe for website payments, and Apple and Google for the features you choose to use. Enabled wallet features also use blockchain RPC or indexing providers. Providers handle information needed to perform their services and may have their own privacy notices.
We may disclose necessary information to comply with a valid legal requirement, investigate fraud or security incidents, protect people from serious harm, or enforce our terms. If ownership of the service changes, personal information may transfer with the service subject to this policy and any notice or choices required by law.
Your choices and requests
You can edit your profile, manage available content and notification settings, remove saves, leave communities, and use reporting and blocking controls. Optional reply emails can be turned off through their unsubscribe or account controls. Blocking someone does not erase copies they already received.
Contact usenookprotocol@gmail.com to request access, correction, a copy of your information or deletion, or to raise a privacy concern. Depending on your location, additional rights may apply. We may ask for limited information to verify that a request concerns your account. Do not send passwords, recovery codes, private keys or wallet recovery phrases. We respond according to applicable legal deadlines and explain any permitted extension or reason we cannot fulfill a request.
Account deletion
Start account deletion from account settings in the app or website. You can transfer communities you own to keep them open, or separately confirm that they should close. Closing a community removes its memberships and public artwork and makes its discussions inaccessible.
When account closure completes, nook removes sign-in credentials, sessions, active profile details, wallet links, drafts, personal relationships and authored media. Current authored text is replaced with deletion placeholders so other people's conversations retain their structure. A reserved username and a record of the deletion can remain to prevent impersonation and preserve necessary references.
Past personal values in your identity-change history and historical text from your posts, replies and edits are removed or replaced with deletion placeholders during closure. Minimal audit references remain, and other people's current replies remain intact. Restricted billing, moderation, security and deletion records can remain where needed for investigations, disputes, legal obligations and accountability. These are not restored as active profile or post content. The current service does not apply a single automatic deletion period to every such record; contact us to request review of information retained about your account. Public blockchain records and copies other people made outside nook are outside our control.
A request may remain pending while a billing or provider dependency is resolved. Our current target for requests needing additional processing is seven days. This is an estimate, not a guarantee that a request has completed. The confirmation flow shows the estimated completion time, and the private completion receipt shows whether deletion is pending or complete. Signing out does not mean deletion finished. If the displayed estimate passes, contact us using the public email above. Retain your private receipt securely while checking completion.
Account deletion does not automatically cancel an Apple subscription or issue a refund. Manage Apple subscriptions through your Apple Account. Website-billing cancellation requires the separate confirmation presented during deletion when applicable. Deleting the app alone does not cancel any subscription.
Retention and security
We keep account information, content and saved drafts while needed to provide the service, subject to deletion controls and the exceptions above. Routine cleanup currently makes the following records eligible for removal:
- Delivered background events and retry records after seven days.
- Read notifications, completed reply-email delivery records, Home feed display records and community-recommendation records after about 30 days.
- Reading history and community visit/joining-history records after about 90 days.
- Records of which days and hours an account was active, used for aggregate usage statistics, after about 90 days.
- Unattached images after seven days when they are not used by a post or saved draft.
- Unused prepared deletion receipts after 24 hours, and completed receipts after 30 days. Pending receipts remain available while their request is unresolved.
Cleanup runs in batches, so eligibility is not an exact erasure deadline. Unread notifications, unfinished jobs and saved drafts have different lifecycles. Restricted billing, moderation, identity and security records follow the purposes described above rather than these routine cleanup windows. Provider logs and support correspondence can have separate retention periods based on troubleshooting, request resolution and applicable obligations.
Current scheduled database backups use a six-day retention window. Changes to live records are not applied retroactively to backup snapshots. Backups are restricted and used for recovery; snapshots expire according to their retention schedule. Recovery must account for subsequent deletion requests before restored data is made available again.
We use access controls and encrypted transport. No service can guarantee absolute security. Report suspected account compromise or a vulnerability to the contact above, without including another person's private information unnecessarily.
Children and international use
nook is a general-audience service for people aged 13 and older, or the higher minimum age required where they live. It is not directed to children under 13. People under 18 need a parent or guardian's permission and may not access adult-only areas. Do not misrepresent your age or use another person's account to bypass restrictions.
If we learn that an account belongs to someone below the applicable minimum age, we will restrict the account and address the information collected, including deletion where required. A parent or guardian can contact us about a child's account. Please provide enough information to identify the concern without sending unnecessary sensitive documents.
nook and its providers may process information in the United States and other countries. Protections and legal requirements can differ by location. This policy does not remove rights or protections that apply to you by law.
Updates and contact
We will update the effective date when this policy changes and give additional notice when appropriate for a material change. Contact nook, United States, at usenookprotocol@gmail.com.