Legal

Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how ID and Brothers (“Librum Publisher”, “we”, “us”), operating publisher.librum.rs and the Margins forum, collects, uses and protects personal data. We are the data controller. Questions or requests: legal@librum.rs. We handle data for two groups: Clients (who commission services) and Forum Users (who use Margins). This policy covers both.

1. What we collect

From Clients — contact details (name, email, phone if provided); project information; manuscripts and files you send; and correspondence.

From Forum Users (Margins) — account data (email, nickname, optional country); authentication data (if you sign in with Google, we receive basic profile information such as your email and name — never your Google password); and Forum Content (your posts, comments and votes). Posts and comments are public and visible to anyone.

From everyone, automatically — technical/usage data (IP address, browser, device, pages viewed, referring pages, standard server logs) and cookies (see our Cookie Policy). We do not intentionally collect special-category data, and we do not knowingly collect data from children under 16.

2. How we use it, and our legal basis (GDPR Art. 6)

Purpose	Legal basis
Replying to an enquiry and preparing a quote	Steps prior to a contract, at your request
Producing your book under an agreed project	Performance of a contract
Project-related updates	Contract / legitimate interest
Creating and securing your forum account	Performance of a contract (forum terms)
Hosting and displaying your public forum posts	Performance of a contract / legitimate interest
Moderating the forum and preventing abuse	Legitimate interest
Tax and accounting records	Legal obligation
Website analytics	Consent
Optional newsletters/offers (if you opt in)	Consent

We do not use your data for automated decision-making with legal effect, and we do not sell your data.

3. Your manuscript (Clients)

Your manuscript and any files you send remain your property. We use them only to quote and to carry out the work you commission. We do not publish, share or reuse your work for any other purpose, treat every file as confidential, and can sign an NDA on request.

4. Your forum activity (Forum Users)

Your nickname and posts are public — anyone can read them, and others may quote or copy them. Please don’t post personal information you wouldn’t want public. Your email address is not public. When you delete your account, we anonymise your past posts (author shown as “[deleted]”) so threads stay readable, and we delete your account and authentication record.

5. Who we share data with (processors)

We share data only as needed, with trusted service providers who process it on our behalf under appropriate agreements:

Database & authentication (Margins forum): Supabase.
Sign-in: Google (OAuth), if you choose social login.
Email & communications: Resend.
Analytics: Plausible (cookie-less; only if you consent to analytics).
Hosting & infrastructure: [hosting provider — confirmed at launch].
Payment: [payment provider — confirmed at launch]; they handle card/bank data, which we don’t store.
Cloud storage for manuscripts and project files: [storage provider — confirmed at launch].

We may also disclose data where required by law, to protect our rights or users, or in connection with a business transfer (merger/acquisition), in which case the successor honours this policy. Where a project requires it (e.g. translation, or production with a printer you choose), we share only what is necessary, with your knowledge.

6. International transfers

We are in Serbia, and some of our processors may store or process data outside your country (including outside the EEA, e.g. in the US). Where that happens, we rely on appropriate safeguards consistent with the GDPR (such as Standard Contractual Clauses) to protect your data.

7. How long we keep it

Enquiries that don’t become projects: up to 24 months, then deleted.
Project files and records: for the project’s duration and a reasonable period after, plus any period required by tax and accounting law.
Forum accounts: while active. On deletion, account and auth data are deleted and posts anonymised.
Backups: removed in the normal course of our backup cycle.

You can ask us to delete your data sooner (see §9).

8. How we protect it

We use appropriate technical and organisational measures — access controls, secure storage, and encrypted transfer where applicable. No transmission over the internet is ever perfectly secure, but we work to industry-standard safeguards. For the forum, access to your account is protected by your password or your chosen sign-in provider; keep your credentials safe.

9. Your rights

Under the GDPR, you have the right to access your data; correct it; have it erased; restrict or object to processing; receive a portable copy; and withdraw consent at any time where processing is based on consent. To exercise any of these, email legal@librum.rs. You may also complain to your local data protection authority.

California residents (CCPA): you may request a summary of personal data we collected in the past 12 months and request deletion. We do not sell personal data. Contact legal@librum.rs.

Forum Users can also self-serve: edit your nickname and country, change your password, and delete your account in your settings.

10. Cookies

We use only necessary cookies plus optional analytics/functional cookies that load only with your consent. Manage your choice through the cookie banner and your browser. Details in our Cookie Policy.

11. Children

The Services are not intended for children under 16. We do not knowingly collect their data. If you believe a child has provided us data, contact legal@librum.rs and we will remove it.

12. Changes

We may update this policy; the “last updated” date shows the current version, and material changes will be noted on the Site or by email where appropriate.

13. Contact

ID and Brothers — Kajmakčalanska 4, Zvezdara, 11000 Belgrade, Serbia · legal@librum.rs · +381 61 6464620