Privacy policy

Last updated: 17 October 2026

Who is responsible.

Pitara Library is operated by Pranit Prakash Wankhede, which decides how the personal data described here is used. Contact us by email at pranitwofficial@gmail.com or by phone on +91 77108 22226.

You can also write to our grievance officer:

• Grievance officer name: Pranit Prakash Wankhede
• Designation: Grievance Officer
• Grievance officer email: pranitwofficial@gmail.com
• Phone: +91 77108 22226

The grievance officer acknowledges each complaint within 48 hours, with a reference number, and resolves it within one month.

What we collect, and why.

• Account and sign-in. The email address or phone number you verify, to send one-time sign-in codes and keep your purchases on one account. If you add a passkey for device sign-in, its public credential is stored; Pitara never receives your fingerprint, face or device PIN.
• Purchases. Orders, the edition, category or membership bought, amounts, payment, refund and subscription status, and the payment provider’s reference numbers, to grant and check access, handle renewals, cancellations and refunds, and keep accounts. Card, UPI and bank details you enter in the payment window are collected by Razorpay, not by Pitara.
• Reading. Your reading position, bookmarks and their labels, and your wishlist, so you can resume reading and keep your library.
• Preferences. Preferred language, interests, age range and gender, to tailor what you see and to apply the under-18 restrictions below. Gender is optional, and you can buy without giving any of these.
• Choices. Whether you allow email, push and optional analytics, and when you changed them.
• Optional analytics. Only if you allow it, and never for under-18 accounts: daily totals of events such as book views, checkouts and search phrases, and a keyed pseudonymous code that changes daily to count unique visitors. Searches that look like contact details or account numbers are discarded. Admin reports show totals, not individual histories.
• Support and security. Support notes, and an audit record of sensitive administrative changes. To protect the service from abuse, request limits use keyed one-way fingerprints of your network address and of the email address or phone number a sign-in or verification code is sent to, and count requests per account using a one-way code of your account identifier.

Who can see it.

Pitara staff use role-limited admin tools, and sensitive changes require a reason that is recorded in an audit log. Pitara uses service providers to run the service: Supabase for its database and sign-in, Vercel for hosting, email or SMS delivery providers for sign-in codes, and Razorpay for payments. These providers may keep their own operational and security logs.

Cookies and browser storage.

• Sign-in cookies keep you signed in. They are essential, and page scripts cannot read them.
• Reader settings (font size and light or dark theme) are saved in this browser’s local storage.
• Tab storage briefly keeps an in-progress sign-in step and checkout so they survive a reload; it is cleared when the tab closes.
• App files such as icons, the offline pages and scripts are cached by your browser so Pitara opens quickly and works without a connection. Paid book content is never kept in this cache.
• Offline downloads you choose are kept encrypted in this browser’s storage, with a key only this browser holds, together with the offline licence and the reading position made offline. Your account records a name for each device you use (for example “iPhone · Safari”), when it last connected and which editions it holds. Signing out or removing the device deletes the downloads; account deletion erases the device records.
• The payment window loads Razorpay’s checkout from Razorpay when you pay, under Razorpay’s own terms and privacy policy.

Pitara does not use advertising cookies or third-party advertising trackers.

Under-18 accounts.

Pitara asks for an age range rather than a date of birth. Under-18 accounts use a restricted path: personalized recommendations, optional analytics, email and push notifications other than sign-in codes, and new-release promotions are switched off. Purchases are made by an adult, who confirms this at checkout: a person aged 18 or older, or a parent or guardian buying for a reader under 18.

How long we keep it.

Optional analytics totals and request-limit records are deleted automatically after limited periods. Account, purchase and reading records are kept while your account is open.

Your choices.

You can change or withdraw optional preferences, personalization and notification choices at any time in your preferences. You can ask for a copy of the personal data linked to your account, or for your account to be deleted: use the controls in your preferences where they are available, or contact us. Deletion can take effect after a grace period during which you can cancel the request; once it completes, the reading access linked to that account ends, including purchased editions.