Skip to content

Privacy

The short version: the files you open never leave your machine, and this page exists to say precisely what does.

Files you open

Nothing you open is uploaded. A PDF dropped into the pre-flight checker, a cover image, a font -- all of it is read inside your own browser and discarded when you close the tab. There is no endpoint here that accepts a file, so this is not a policy that could be changed by a setting.

Your books

The specifications you build -- title, trim size, paper, page count, keywords, description -- are stored by your browser, in localStorage, under the key kdp-book-spec. They stay on the machine that made them. Clearing your site data deletes them, which is why the library screen offers an export.

An account can carry that list to another machine you own. That is the only reason accounts exist here, and it is never required to use a tool.

Analytics, trackers and third parties

There are none. No analytics, no tag manager, no embedded fonts from another host, no advertising, no social widgets, no session recording, no A/B testing.

This is enforced rather than promised. The Content-Security-Policy this site sends allows scripts, styles and network connections from this origin only, so a third-party script added by mistake would be blocked by the browser rather than quietly run. That policy is pinned by a test in the repository.

Cookies

One, and only while you are signed in: a session cookie set when you sign in and cleared when you sign out. It is httpOnly, so no script on the page can read it, and it holds your account id and address and nothing else.

There is no cookie banner because there is nothing to consent to. Signing in is the consent, and signing out is the withdrawal.

What an account stores

Three fields, on the server, and this is the complete list:

  • the email address you signed up with;
  • a hash of your password -- scrypt, salted, so the password itself is not stored and cannot be read back out;
  • the date the account was created.

No name, no profile picture, no record of which tools you opened or when. Not as a courtesy -- there is no field for them.

Your password

At least 10 characters, and there is no way to reset it. This site sends no email, so it cannot send you a reset link. That is a real cost and it is stated here rather than discovered later: if you forget it, the account is gone and you make a new one. Your books are unaffected, because they were never in the account in the first place.

How long it is kept, and how to delete it

An account is kept until you delete it. Sign in and the option is at the bottom of the sign-in page; it removes the row immediately and there is nothing left behind, because the three fields above are all there ever was.

Deleting an account does not touch your books. They are in your browser and they stay there.

Amazon and KDP

iLoveKDP is an independent tool and is not affiliated with, endorsed by or connected to Amazon or Kindle Direct Publishing. It does not connect to your KDP account, and it could not: there is no integration and no credential for one. Every number it gives you is computed locally from the published specifications.

Changes

This page describes the deployment you are reading it on. It is generated from the same configuration the application runs on, so it cannot fall behind the code in the way a hand-maintained policy does.