erb.one
Legal

Privacy Policy

What erb.one collects, why, who sees it, and how to get it deleted. No ads, no analytics, no selling data.

Last updated October 25, 2026 · Terms of Use · Questions: ryan@erb.one

1. Who we are and what this covers

erb.one is operated by Erb Networks, LLC ("Erb Networks", "we", "us"), a Utah limited liability company run by Ryan Erb in Utah, United States. We are the data controller for the personal data described here. This policy covers the erb.one website only. The projects described on the site (for example LakeMonster.com, ioJump.com and AuditHat.com) and the sites we link to have their own privacy policies.

2. What we collect and why

Account

If you create an account we store your email address, the name you give (or the name your Google account provides), your Google account ID if you sign in with Google, and when you signed up and last signed in. We use it to run your account, show your name next to what you post, and send you account-related email.

Things you do on the site

We record the ratings, reviews and comments you post on books, the feature requests you submit and your votes on them, the tools you like, and the tools you download (which tool, which account, when). This is what the features are: a rating has to be stored to be shown. Comments, reviews, ratings and approved feature requests are public and shown with your name; votes, likes and download history are not shown to other users.

Newsletter and beta sign-ups

If you subscribe to the newsletter we store your email address, the page you subscribed from, and whether you confirmed. If you join a beta we store your email and which beta. Every email we send includes a one-click unsubscribe link.

Cookies

The site sets two first-party cookies and nothing else: erbone, a session cookie that keeps you signed in for up to 90 days, and erbv, a random visitor ID that lets visitors who are not signed in like a tool once rather than many times. Neither contains personal information and neither is used for tracking across other sites. There are no advertising or analytics cookies.

Server logs

Our web server records standard request logs: IP address, time, page requested, browser type and referring page. We use them for security, abuse prevention and keeping the site running. They are rotated and deleted automatically within a few weeks. The site also keeps short-lived rate-limit counters keyed by IP address to stop spam.

What we don't do

We do not run advertising, we do not use Google Analytics or any other analytics or tracking service, we do not build profiles, and we never sell or rent personal data.

3. Services that process data for us

  • Google Sign-In (Google's OAuth service) handles sign-in with Google if you choose it. Google receives your sign-in details and gives us your email, name, profile picture and account ID. We never see your password. Google's handling of that data is described in Google's privacy policy.
  • Cloudflare Turnstile may run on the sign-in page to tell humans from bots. It may process your IP address and browser details under Cloudflare's privacy policy.
  • Email delivery for sign-in links, confirmations and the newsletter goes through our business email provider, which processes recipient addresses and message contents in order to deliver them.
  • Hosting and backups run on servers we control, with encrypted nightly backups stored with a cloud storage provider.

Links to Hardcover, Audible, Libby and OverDrive, author websites, publisher pages, GitHub and other outside sites take you to services we do not control. Their privacy policies apply once you leave erb.one. Book cover images are served from our own server.

4. Who we share data with

Only the service providers above, and only to do what is described. We will also disclose data if the law requires it, to protect the rights or safety of a person, or as part of a sale or transfer of the site, in which case this policy continues to apply. Public content (reviews, comments, approved feature requests) is, by its nature, visible to anyone.

5. How long we keep it

Account data and your content stay until you delete your account or ask us to remove them. When a comment is removed it is hidden immediately and purged from backups within 30 days. Newsletter addresses stay until you unsubscribe. Server logs are deleted within a few weeks. Backups are kept for seven days.

6. Security

The site is served only over HTTPS. We hold no passwords at all: sign-in is by Google or by a one-time email link. Cookies are marked secure and HTTP-only. Access to the server and database is restricted to Ryan. No system is perfectly secure, so if we learn of a breach affecting your data we will tell you by email as soon as we reasonably can.

7. Your choices and rights

You can edit your display name on the community page, unsubscribe from any email with the link in it, and remove your ratings by re-rating or asking us. To see, correct, export or delete the data we hold about you, or to close your account, email ryan@erb.one from the address on the account and we will do it within 30 days. Residents of California, the European Economic Area, the United Kingdom and other places with privacy laws have these rights by law; we extend them to everyone. We do not sell personal data and do not discriminate against anyone for exercising their rights. If you are in the EEA or UK, our legal basis is performing the service you asked for (account, posts, newsletter) and our legitimate interest in keeping the site secure (logs, rate limits). Data is processed in the United States.

8. Children

The site is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.

9. Changes to this policy

We will post any changes here and update the date at the top. If a change is significant we will tell account holders by email.

10. Contact

Erb Networks, LLC (erb.one), Utah, United States. Email ryan@erb.one.