Last updated: October 1, 2026
When you create a Frontlist account, we collect your email address, a securely hashed version of your password (we never store your actual password), and optionally a pen name. As you use the app, we store the book, format, platform, and vendor information you enter. If you subscribe, Stripe processes your payment; we store a reference to your Stripe customer record, but never your full card number. If you submit the contact form or subscribe to our newsletter, we store the email address and message you provide. On the public website, we also collect page visits, referral and campaign parameters, device and browser information, an anonymous visitor identifier, approximate location derived locally from the requesting IP address, and the IP address used for the request.
Frontlist stores the book metadata, edition details, statuses, and notes you provide. If you upload manuscript, cover, or audio files, we store those files privately using Railway object storage, along with version history, checksums, validation results, approval records, submission snapshots, and prepared packages. Packages retain their destination, version, timestamps, metadata and pinned file references, preparation activity, delivery acknowledgements, receipt text or external IDs, errors, and later status messages you provide. File downloads require your authenticated account and use links that expire after five minutes. Anyone you give an unexpired download link can use it until it expires. We process uploaded files to check supported formats, document structure, page counts, and image dimensions. Uploading a file or preparing a package does not send it to a retailer. You choose when to download, share, or deliver package contents in the destination portal. You can delete unreferenced file versions; archived versions remain stored, and versions referenced by a snapshot must be retained until that snapshot is deleted. Snapshots used by a package remain retained with its history. Deleting a book or edition also deletes its file records, snapshots, packages, and activity history and queues its stored files for removal. We do not sell uploaded creative work. We don't use advertising trackers or sell browsing data. The authenticated app does not use public-site visitor tracking. The public website uses a first-party visitor and session cookie for traffic, campaign, and conversion measurement, alongside the disclosed Google Analytics service.
We use your data to operate the service: to authenticate your account, to manage your book workspace, privately process files, prepare requested packages, and display your delivery and campaign records, to process payments, to respond to support requests, and to send you account-related emails like password resets. If you've opted into the newsletter, we use your email to send occasional product updates. When you arrive through a niche landing page, we may retain its first recorded path and campaign parameters in your browser for 30-day signup attribution. After signup, the attributed page is linked to your account so we can compare activation and paid conversion by audience. This record remains with your account until deletion. Public-site analytics are used to understand traffic, improve pages, attribute signups and paid conversions, measure campaigns, filter automated traffic, and protect the service.
We share data with the third-party services that make Frontlist work: Railway for hosting, private file storage, and request delivery, Stripe for payment processing, Resend for sending transactional emails like password resets, and Google Analytics for public-site traffic reporting. We don't sell your data, and we don't share it with advertisers. Your titles, formats, and platform data are private to your account; other authors never see them, only the shared list of built-in platform names is common across accounts.
We retain your account data for as long as your account is active. Raw visitor IP addresses are restricted to administrators and automatically deleted after 60 days. Approximate location, anonymized visitor identifiers, page activity, referral information, and campaign attribution may be retained longer for aggregated business reporting. If you'd like your account and associated data deleted, contact us through the contact page and we'll process the request.
You can access, correct, or delete most of your data directly within the app. For anything you can't change yourself, including full account deletion, reach out through the contact page. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA; contact us and we'll do our best to accommodate applicable requests.
Passwords are hashed, not stored in plain text. Data is transmitted over encrypted connections. No system is perfectly secure, but we take reasonable steps to protect your information.
We may update this policy from time to time. If we make material changes, we'll make a reasonable effort to notify active subscribers by email.
Questions about this policy can be sent through the contact page.