Privacy

This notice covers the public instance at hardcover.benjuntilla.com, run by Ben Juntilla. If you run your own copy, edit this file; it is what your deployment shows at /privacy.

What is stored

• Your connection. When you connect an MCP client, the server keeps your Hardcover access and refresh tokens, your Hardcover user id and username, and when the connection was created and last used. These live in a Cloudflare Durable Object dedicated to that connection and are never sent to your MCP client.
• The authorization grant. Cloudflare KV holds the grant your MCP client received: your Hardcover user id and username, the permissions you approved, and hashes of the client’s tokens. Your Supporter status and librarian roles are stored encrypted with the client’s token.
• MCP client registrations. The name, website and redirect addresses an MCP client registers with.
• Cookies. The consent page sets cookies that tie the sign-in to your browser and remember which apps you already approved here.

No book data is stored. Your library, reviews, lists and everything else you ask for pass straight through from Hardcover to your MCP client.

Logs

Cloudflare records request logs and traces for this server: the path, method, status, timing, your IP address and country, and errors. Request bodies, responses and tokens are not logged. Logs are kept for up to 7 days. Unexpected errors are grouped in Cloudflare’s error tracking without request data.

Rate limiting counts requests per IP address and per Hardcover account. The counters are not stored.

How long

• A connection unused for 150 days is revoked at Hardcover and deleted.
• Disconnect any time from Hardcover under Account → API → Authorized apps. The server notices on its next use, and your MCP client has to sign in again.
• Expired grants and tokens are purged from KV daily.

Who can see it

Only the operator, through the Cloudflare account that hosts the server. Nothing is sold or shared. Hardcover sees your requests as coming from this app, under the permissions you approved.

Contact

Open an issue at github.com/benjuntilla/hardcover-oauth-mcp.