Privacy Policy

Last updated: September 20, 2026

This policy explains how &handworks.com ("we") handles personal data in the website and the mobile applications we publish: MyBookStore and Oyakodon for Mastodon.

Questions about this policy, and any request described below, can be sent to app@andhandworks.com.

What we collect, and why

You are not asked to create an account with us, and we do not ask for your name, address, or telephone number.

• What stays on your device. Entries and settings you create in our apps are held on the device you created them on, so that the app works without an account. The entries themselves are not sent to us — though, as described below, the title of an entry you add is included in the usage record.
• What a feature sends out. Some features answer a question by asking an outside service. Using one sends what is needed to answer it: what you are looking for and, where the feature depends on where you are, your location. Where a product connects you to an account you hold with another service, what you do through it — what you post, the files you attach, what you search for there — goes to that service. Viewing that service's pages inside the app works like viewing them in a browser, including the session and cookies that involves. Signing in that way is handled by the other service directly, and the credentials you enter do not pass through us; the app keeps only the resulting access token, on your device.
• Usage and advertising data. We use analytics and advertising services. They record how our products are used, and that record includes the titles of entries you add and the links you follow, together with an identifier that is not linked to your name, your device type, and an approximate location derived from your IP address. We can view these reports. We use them to see which features are used, to understand advertising revenue, and — where you have allowed it — to personalise the advertising you are shown.
• Purchases. Purchases are processed by the app store. We learn that a purchase occurred; we do not receive your payment details.

The basis on which we process it

Processing that carries out what you asked a feature to do is necessary to provide the product you are using. Purchases are processed because that is necessary to complete the transaction you entered into. Advertising personalisation and tracking rely on the consent you give when your device asks, which you can change in your device settings at any time. Usage analytics relies on our legitimate interest in maintaining and funding the products, and you may object to it — see Your choices and Your rights.

Who else receives it

Personal data is received by the categories of recipient below. We do not sell it.

• Providers of the search and content services our features query
• Analytics and advertising providers
• App stores and payment processors
• Where a product connects you to an account you hold elsewhere, that service

We share data only with providers whose terms commit them to protecting it to a standard comparable with this policy. What each of them keeps, and what it does with it, is governed by those terms. Several operate outside your country, so using our products can involve your data being processed abroad.

How long it is kept

Data stored on your device remains until you delete it or remove the app. Usage and advertising reports remain available to us for as long as the services we use retain them; we keep no separate copy.

Your choices

• Permissions can be refused or withdrawn in your device settings at any time. Refusing a permission limits the features that rely on it.
• Advertising personalisation can be turned off in your device's advertising settings, and tracking declined when you are asked.
• Browser cookies can be blocked or cleared in your browser.
• There is no in-app switch for usage analytics. You can object to it by writing to us at the address above, and removing an app stops it collecting anything further from that device.

Your rights

You may ask us for a copy of personal data relating to you, ask us to correct or erase it, object to or restrict how it is used, or ask for it in a portable form. Write to the address above. Because we hold no account records, we may be unable to connect a request to a particular person; where that happens we will say so. You may also complain to the data protection authority in your country.

Deleting data

Entries saved in an app can be deleted in the app, and removing the app deletes what it stored on your device. Content you posted to a service you connected to is deleted through that service, and access you granted to that service can be withdrawn in your account settings there. Reports already delivered to analytics and advertising providers are subject to their deletion policies.

Keeping data safe

Requests to outside services are made over encrypted connections. Data held on your device is protected by the device's own protections, so keeping a passcode set and the operating system updated matters.

Changes

We may revise this policy. The version on this page is the current one, and the date above shows when it last changed.