Privacy

Last updated 18 October 2026

Cite Lit is built to hold as little as possible. There are no student accounts, no advertising cookies and no trackers in the browser.

Who is responsible

Cite Lit, a trading name of a company registered in the Netherlands, is the controller of your personal data. Contact: hello@citelit.com.

For parents and other buyers

• What we hold: your email address, what you bought and when, and the links that give access to your pass.
• Payment: Stripe handles your card or wallet. We never see or store your card details.
• Advertising: only if you agree at checkout, our server tells Meta that a purchase happened, with the reference of the ad you came from and a scrambled (hashed) copy of your email address, so we can see which ads work. Nothing is sent from your browser. You can withdraw your agreement at any time by emailing us.

Why we use it, and on what basis

• To give you the pass you paid for, send sign-in links and receipts: to perform our contract with you.
• To keep tax records: because the law requires it.
• To prevent fraud, keep Cite Lit secure and handle refunds: our legitimate interests.
• To tell Meta about a purchase from an ad: only with your consent.

We do not use anyone's personal data to train artificial intelligence.

Students and the Children's Code

Cite Lit is designed for students, and we follow the UK Information Commissioner's Age Appropriate Design Code (the Children's Code). Students need no account, and we never ask for a name, email address or school. There is no profiling, no tracking and no advertising on any page. The link a student uses says only which pass or class it belongs to and which chapter has been reached. We do not record what a student reads.

For teachers

We hold your email address so you can sign in, and your class links: the book, the chapter the class has reached and whether the story so far is shown. A class link holds nothing about your students.

Cookies

We use only cookies that Cite Lit needs to work: one that keeps an adult signed in, and one that remembers which student or class link was opened, for up to eight hours. We use no analytics, advertising or tracking cookies, so there is no cookie banner. If checkout later needs Stripe's own fraud-prevention cookies, we will list them here.

How long we keep it

• Purchase records: 7 years, as Dutch tax law requires.
• Your email address and access links: until 90 days after your pass ends, unless you buy again.
• A teacher's class links: deleted after 12 months without use.

Where your data is kept

Our database is in Frankfurt, Germany. Our website is hosted by Vercel and payments are processed by Stripe, both based in the United States. Where data goes outside the UK or the European Economic Area, it is protected by an adequacy decision or by approved contract clauses.

Your rights

You can ask to see, correct or delete your data, or object to how we use it, by emailing hello@citelit.com. If you are in the UK and unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk). In the Netherlands, the Autoriteit Persoonsgegevens.