Privacy policy
Last updated 5 October 2026
Journal to Paperback prints the journal you’ve already written as a paperback book. This policy explains what we collect, why, who sees it, and the choices you have. If you have a question, email hello@journaltopaperback.com.
Journal to Paperback is run by MXJQNN LTD., a company registered in England and Wales, with its registered office at 69 Watcombe Road, Bournemouth, Dorset, BH6 3LX. MXJQNN LTD. is the controller of the personal data described in this policy. The same company runs Yesterday, which has its own privacy policy.
What we collect
- Your email address, to sign you in with a code and to email you about your book.
- Your journal: the files you upload, the entries and dates we take from them, and the proofs we make.
- Your book’s details: its title, cover colour, and any photos, messages or image you add.
- Your order: the delivery name and address, how many copies, and a record of the payment. Payments are handled by Stripe; we never see your full card details.
- What you send us: your emails, and any changes you ask for.
- How you found us: the campaign labels in the link you followed (such as
utm_source), the page you arrived on and the site you came from. - Technical data: privacy-friendly analytics (no cookies, no cross-site tracking), page-speed measurements, and error reports that help us keep the site working.
- Ad measurement, only if you say yes to ad cookies (see Measuring our ads).
A journal can hold sensitive things, such as your health, beliefs or relationships. We use what’s in yours only to make your book.
How we use it, and why we’re allowed to
- To make your book and deliver it: reading your file, setting it as a book, making your proof, printing and posting your copies, and emailing you about them. We need to do this to provide the service you’ve asked for.
- To keep the service working and safe, and to see which campaigns bring people to us. These are our legitimate interests.
- To measure our ads, only if you say yes. This rests on your consent, which you can withdraw at any time.
- To keep accounting records, because the law requires it.
We don’t sell your data, and we never use your journal for advertising.
Who sees your journal
- Our software reads your file to find your entries and dates, and sets them as a book.
- Our team, a few people, open your file or your proof only when they need to: to check your book has come out right, to fix a problem, or to make a change you’ve asked for. Never to read it for any other reason.
- Our printer receives the finished book and your delivery address, to print and post your copies.
- The companies below store and process it for us. No one else sees it.
The companies that help us
They work on our instructions and use your data only to provide their service to us.
- Supabase: our database, sign-in, and storage for your uploads and proofs.
- Vercel: hosting, cookie-free analytics and page-speed measurement.
- Stripe: payments.
- Postmark: email.
- Sentry: error reports.
- Our print and fulfilment partner: printing and posting your book.
Measuring our ads
We advertise on Facebook and Instagram (Meta) and on Google. The first time you visit, we ask whether we can use cookies to see which of our ads work. If you say no, or don’t answer, none of what follows happens.
If you say yes:
- We load Meta’s pixel and Google’s ads tag on our pages. They set the cookies listed below, and tell Meta and Google which of our pages you visit and when you reach each of these steps:
- confirming your email
- uploading your journal
- requesting a proof
- paying, including the amount
- Our server also reports those steps to Meta directly, through Meta’s Conversions API, so they still arrive if your browser blocks the pixel. With each one we send:
- your email address and account number, hashed first (turned into a code Meta can match against its own records but can’t turn back into the original)
- your IP address and browser details
- the IDs in Meta’s cookies
- If you came from a Google ad and buy a book, we may tell Google the ad’s click ID, when you paid and how much.
We never send Meta or Google your journal, your book’s contents, your name or your address.
Meta and Google use this to measure and improve our ads. They may also use it for their own purposes, as controllers in their own right, under their own policies: Meta’s privacy policy and Google’s privacy policy. They may process it outside the UK, including in the United States.
You can change your mind at any time with Cookie settings at the bottom of this page or our home page. If you switch ad cookies off, we stop loading the tags and delete their cookies from our site. We can’t recall what has already been sent, but you can manage it in your Meta and Google ad settings. We remember your answer for six months, then ask again.
Cookies
We use a few cookies the site needs to work, and ad cookies only if you say yes. Our analytics don’t use cookies.
| Cookie | What it does | How long |
|---|---|---|
sb-…-auth-token | Keeps you signed in. | Up to 400 days, or until you sign out |
jtp_consent | Remembers your answer about ad cookies. | 6 months |
jtp_attr | Remembers the campaign labels of the link that brought you here, so we can add them to your account if you sign up. If you said yes to ad cookies, it also holds the ad’s click ID. | 30 days |
_fbp, _fbc | Meta’s ad measurement, only if you said yes. | 90 days |
_gcl_au, _gcl_aw | Google’s ad measurement, only if you said yes. | 90 days |
If you said yes, Google may also set cookies on its own sites, and after you pay we keep a note in your browser that the purchase was reported, so it isn’t reported twice.
How long we keep it
- Your account, uploads, book and proofs: until you ask us to delete them. Email us and we will.
- Records of your payment: kept in our accounts and by Stripe for as long as the law requires (six years in the UK), even if you delete your account.
- Your answer about ad cookies as it stood when you went to pay: kept with your account, so we know whether we may report your purchase.
- Meta and Google keep what they receive under their own policies.
Your rights
You have the right to:
- get a copy of your data
- correct it
- have it deleted
- limit or object to how we use it
- receive it in a portable format
- withdraw your consent to ad cookies at any time (see above)
To use any of these, email hello@journaltopaperback.com. We’ll reply within a month.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put it right first.
Security and international transfers
Your data is encrypted in transit. Your uploads and proofs are stored privately and can only be opened through links that expire. Some of our providers process data outside the UK, including in the United States. Where they do, appropriate safeguards apply.
Children
Journal to Paperback is not intended for children under 16, and we do not knowingly collect their data.
Changes
We may update this policy from time to time. We’ll post any changes on this page and update the date above.
Contact
Journal to Paperback, MXJQNN LTD. · hello@journaltopaperback.com