Legal

Privacy

GuildTales is operated by Bobook Limited, a private company limited by shares registered in Ireland, CRO number 785764.

Registered office: Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, Ireland. Customer and privacy contact: info@bobook.club.

Last updated: 30 October 2026.

This page describes how Bobook Limited handles information on GuildTales. It is a draft.

Bobook Limited (CRO 785764, Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, Ireland; info@bobook.club) is the controller. We use your information as follows:

Account and membership (email, password hash, tier, subscription status, the time you consented to immediate access): to perform our contract with you (Art. 6(1)(b)).
Any transaction and licensing records we hold: to comply with our legal obligations under Irish tax and company law (Art. 6(1)(c)).
Reading analytics and site-version testing (gt_reader, gt_variant and linked events): your consent (Art. 6(1)(a)).
Chapter-update emails: your consent (Art. 6(1)(a)), which you can withdraw at any time.
Security, preventing abuse and paywall circumvention, and handling legal claims: our legitimate interest in keeping the service safe and lawful (Art. 6(1)(f)).

We don't sell your data, and we don't make decisions with legal or similarly significant effects by automated means alone.

GuildTales is for readers aged 16 and over.

Cookies

GuildTales sets first-party cookies. It does not use third-party advertising cookies.

gt_reader is a random id for this browser. It is httpOnly. GuildTales uses it to recognise a returning reader and to attach events to that browser. It is kept for at most 13 months (393 days).
gt_variant is either hall or v_b. It records which version of the site this browser was shown. It is not a membership name. It does not change the chapter text. It is kept for the same 13 months.
gt_session is set only after you log in. It keeps you signed in for 30 days. Logging out deletes it.
__cf_bm and cf_clearance are security cookies set by Cloudflare. They are strictly necessary and are set without consent.

gt_session is strictly necessary and is set without consent. gt_reader and gt_variant are optional and are set only if you click Accept in the cookie banner (legal basis: your consent, Regulation 5 of S.I. 336/2011 and Art. 6(1)(a) GDPR). Your choice is saved in your browser's local storage so we don't ask again. You can withdraw consent at any time via 'Cookie settings'. Withdrawing deletes both cookies and stops new events being linked to this browser.

Without the optional cookies you can still read the free chapters, create an account, log in, and pay for a membership. Checkout, payment, cancellation and renewal are recorded against the account, not against a browser id. Chapter counts, return visits and the version comparison are not linked to this browser until you click Accept.

Accounts

If you create an account, GuildTales stores your email address and a hash of your password. The password itself is not stored. The account is tied to the variant on this browser at the time you join, if you have allowed the optional cookies. You can read the free chapters without an account. If you buy a membership, GuildTales stores the time you agreed that access starts immediately. Account data is kept while your account is open. When you close your account, we keep your account data for 30 days, so you can change your mind, and so we can deal with support questions, chargebacks and refund requests. After that we delete it. We keep a limited record only where we need it: any transaction or licensing records we hold, for 6 years from the end of the financial year they relate to (Irish tax and Companies Act 2014 record-keeping rules), and data needed for a dispute or legal claim that has been raised, until it is resolved (up to the 6-year Irish limitation period). Stripe, as merchant of record, keeps its own payment and tax records under its own privacy notice.

Stripe

Memberships are sold through Link, Stripe's merchant-of-record service, and Stripe runs checkout and the customer portal. Stripe is an independent controller for payment, fraud-prevention and tax data, and keeps its own records under https://stripe.com/privacy. GuildTales stores only a Stripe customer id, your membership tier and subscription status, and the time you consented to immediate access. We never see your full card number. Stripe may set its own cookies on Stripe's pages.

Who we share it with

We use these service providers. Each acts on our instructions under a data-processing agreement, unless stated otherwise:

Cloudflare, Inc. (hosting, content delivery, security). It processes your IP address and request data when you visit.
Resend, Inc. (sending chapter-update and account emails).
OpenAI (gpt-4o-mini-tts, a stock voice, generating narration from chapter text). It receives story text only, not your personal data.
Sold through Link, LLC. Link is the seller of the membership. Bobook Limited provides the reading room. Stripe is an independent controller for payment, fraud-prevention and tax data: https://stripe.com/privacy.

We may also disclose data where the law requires it.

There is no third-party analytics tag.

International transfers

Some providers (Cloudflare, Stripe, Resend, and OpenAI) may process data in the United States. Where they do, transfers rely on the provider's certification under the EU-U.S. Data Privacy Framework, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards at info@bobook.club.

Event tracking

GuildTales records events on its own server. Each event includes the variant (hall or v_b) only after you accept the optional cookies. The event log does not include your IP address. There is no third-party analytics tag.

chapter_start when a chapter you can read is opened, once per reader and chapter.
chapter_complete when you reach about 90% of a chapter you can read, once per reader and chapter.
return_visit when this browser comes back at least 24 hours after the previous visit.
paywall_view when a locked chapter is opened.
checkout_start when a membership checkout begins.
checkout_complete when that checkout is paid.

Other events used to run the reading room include landing views, chapter views, joining with an email, new memberships, cancellations, and renewal payments. Analytics events linked to the gt_reader id are kept for up to 25 months and then deleted or fully anonymised. The gt_reader and gt_variant cookies themselves last at most 13 months, and we ask for consent again after that. Server and security logs, including IP addresses processed by Cloudflare, are kept for up to 31 days, unless needed longer to investigate a specific security incident.

Email you give us

At the end of chapter 10, and on a locked chapter, you can leave an email. GuildTales stores it only if you tick the consent box. The stored row includes the email, the fact and time that you consented, the story and the chapter, and, only if you accepted the optional cookies, the variant and reader id. Every email includes a one-click unsubscribe link. You can also write to info@bobook.club. When you unsubscribe, we stop sending emails and delete your email-capture record within 30 days.

Your rights

You have the right to access your data, correct it, have it erased, restrict its use, receive it in a portable format, and object to processing based on our legitimate interests. Where we rely on consent, you can withdraw it at any time. That doesn't affect processing that happened before you withdrew. Write to info@bobook.club. We reply within one month. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, www.dataprotection.ie, or to the authority in your EU country.