Security and privacy
What we do with your data, point by point.
This page sums up the privacy policy with the same facts. If they differ, the policy prevails.
Hosting
Source Recipients and processors
- Application and database
- Hetzner Online GmbH, Gunzenhausen, Germany.
- Files, exports and backups
- IDrive e2, Paris (eu-west-4) and Ireland regions.
- Transactional e-mails
- Resend.
- Payment
- Stripe Payments Europe.
- In transit
- HTTPS everywhere.
- Passwords
- Hashed.
- AI keys and device secrets
- Encrypted on our servers.
- Backups
- Encrypted, key kept separately. Erased data remains in earlier backups until their rotation, and an erasure is applied again before any restore.
Sessions
Source Account and authentication
- Session length
- 7 days, extended with use, deleted on sign-out.
- Password reset
- Every session is ended.
- Links sent by e-mail
- Verification link valid 24 hours, reset link valid 1 hour.
Activity measurement
Source Measurement of activity
- Method
- Server-side, with no cookie or script.
- Totals
- Anonymous, per day, never for fewer than five people.
- Retention
- 25 months.
- Objection
- From the settings.
AI providers
Source AI keys and the AI providers you chooseTransfers outside the European Union
- Providers
- Six to choose from, key encrypted; data goes straight to the provider with your key. They are not our processors.
- What is sent
- Metadata, file name and an excerpt of at most 16 KiB.
- Outside the European Union
- Z.ai, Kimi and MiniMax, with no verified transfer safeguard.
E-readers
Source Devices and synchronisation (OPDS, KOReader, Calibre)
- Login and secret
- One per device; secret encrypted and shown once. Immediate revocation.
- KOReader progress and delivery log
- Erased 24 months after their last update.
- Protocols
- Wireless Calibre unencrypted; OPDS and kosync over HTTPS.
Mobile app
Source Reader and Android app
- Sign-in
- OAuth with PKCE S256 and explicit consent.
- Tokens
- 10-minute access token, refresh family of at most 7 days; kept in the phone’s keychain, never in the logs.
- Files
- A book is copied, checked with SHA-256, then read locally.
Your rights
- Rights
- Access, portability, erasure, objection.
- From the settings
- Export of your data; account deletion in 14 days.
- Response time
- One month.
- Complaint
- Possible with the CNIL.