Who we are

RollMyLibrary is a one-person software business in the United Kingdom. For data protection law we are the controller of the personal data described here.

Trader: [TRADER LEGAL NAME] trading as RollMyLibrary
Address: [TRADING ADDRESS — street, town, postcode, United Kingdom]
Email: support@rollmylibrary.com
VAT: [VAT NUMBER, or "Not VAT registered"]

The short version

If you read nothing else on this page, read this. Everything below is the same four promises, written out in full.

What we collect, why, and for how long

Every row below is something the system genuinely stores. If it is not here, we do not have it.

Personal data we hold, the reason for it, the lawful basis, and how long it is kept

What	Why	Lawful basis	Kept for
Name and email address	To take your order, email your download code and licence key, and answer support about your purchase.	Performance of a contract	While your licence is live. Records needed for tax are kept as long as HMRC requires — currently at least five years after the 31 January submission deadline for the relevant tax year.
Order details (quantity, price, payment method, whether you consented to immediate delivery)	To fulfil the order, to prove what was agreed, and for our accounts.	Contract; legal obligation (tax)	As above.
The IP address the order came from	Fraud prevention and rate limiting. A small shop that verifies payments by hand needs to be able to spot abuse.	Legitimate interests — preventing fraud and abuse against our shop	12 months, then deleted automatically.
Licence key, and the email it was issued to	To activate the app, to move a licence between machines, and to revoke a key that has been shared or charged back.	Contract	While the licence is live.
Device identifier	A one-way hash derived from your Windows installation, so a licence can be limited to three machines. It is not reversible, it is not your hardware serial number, and it tells us nothing about your PC or what is on it.	Contract	Until the machine is deactivated or the licence ends.
Download codes	To let you fetch the installer, three times within thirty days.	Contract	Deleted 12 months after the code expires.
Security and abuse logs	Failed admin logins and rate-limit counters, so the shop can be defended. Rate-limit records are stored as a truncated hash, not as your address.	Legitimate interests — security of the service	90 days.
Support emails you send us	To answer you.	Contract; legitimate interests	24 months after the conversation ends.

What the app sends, and what it never sends

• RollMyLibrary Free sends us nothing. It never contacts our server.
• The paid app contacts us for one thing: your licence. Activating, deactivating, and a quiet re-check roughly every 14 days. That exchange contains your licence key and the hashed device identifier — not your files, not your library, not your folder names.
• Online title identification is optional and off until you use it. When you do, a filename is sent to ThePornDB, TMDB or OMDb to look the title up. Those are separate companies with their own privacy policies. If you add your own TMDB key it is stored on your PC and only ever sent to TMDB.
• Thumbnails, previews and your library index never leave your machine.

Cookies and browser storage

This site sets no tracking cookies and no advertising cookies, and it loads nothing from a third party — no fonts, no analytics, no CDN, no social buttons. The shopping basket lives in the page's memory and is gone when you close the tab.

The only cookie the site can set is a PHP session cookie, and only on the shop owner's admin login page. It is strictly necessary to provide that page, so under the Privacy and Electronic Communications Regulations it needs no consent — which is why you are not being asked for any.

Who else sees your data

Three companies, each for one job:

• IONOS — our hosting provider, which stores the website and its data.
• PayPal or Revolut — whichever you choose to pay with. You pay them directly. We never see or store your card details. They are separate controllers of what they collect and have their own privacy policies.
• Our email provider, to deliver your codes.

That is the entire list. We do not use advertising networks, data brokers, analytics providers, or AI training services, and we do not sell data.

Where your data is held

The website and its data are hosted in the United Kingdom or the European Economic Area. PayPal and Revolut are international and may process payment data outside the UK under their own safeguards. We do not transfer your data anywhere else.

How we protect it

• The whole site is HTTPS-only, with HSTS.
• Order and licence data live outside the web root and are denied to the web by server rules; the admin area is password-protected with a hashed password, rate-limited, locked out after repeated failures, and supports a second factor (a six-digit code from an authenticator app).
• Licences are signed with Ed25519 and verified inside the app, so a licence cannot be forged even by someone who reaches the server.
• The site runs a strict Content-Security-Policy and serves no third-party code.
• Backups exist, and are kept separately from the credentials that unlock anything.

Your rights, and how to use them

Under UK data protection law you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything wrong.
• Delete your data (the right to erasure). We will, unless we must keep a record for tax — in which case we keep the minimum and delete the rest.
• Restrict or object to what we do with it, including anything we do on the basis of legitimate interests.
• Take it elsewhere in a portable format.

Email support@rollmylibrary.com from the address you bought with, and we will answer within one month. There is no charge. We may ask you to confirm something only the account holder would know — we would rather do that than hand your data to somebody else.

We make no automated decisions about you and do no profiling.

If you are unhappy with our answer

Tell us first and we will try to fix it. You also have the right to complain to the UK regulator, the Information Commissioner's Office — ico.org.uk/make-a-complaint, helpline 0303 123 1113.

Children

RollMyLibrary is sold to adults. It is not directed at children and we do not knowingly collect data from anyone under 18.

Changes to this notice

If we change how we handle your data we will update this page and change the date at the top. Material changes affecting existing customers will be emailed to them.