Privacy at Timeless Reader

The short version

You can browse and read without an account. If you create one, we store only the information needed to sign you in and preserve your reading shelf and progress. We do not sell personal information.

Information we handle

• Your email, optional name, profile image, and sign-in method.
• Books saved for later and your most recent reading position.
• Basic usage and performance measurements supplied by Vercel Analytics, such as visited pages and device characteristics.
• Security information used for short-lived rate limiting. Client identifiers are cryptographically hashed before storage.
• A supporter's name or display name, email address, optional message, and transaction information when they make a voluntary payment.
• A supporter name on the public thank-you list, but only when the supporter explicitly asks us to publish it.

Guest reading positions and preferences stay in your browser's local storage unless you sign in and synchronize progress.

Support payments and public thanks

Support payments begin on Ko-fi and are processed by PayPal. As part of a payment, Timeless Reader receives the supporter name or display name, email address, optional message, and transaction information made available by Ko-fi and PayPal. We do not receive or store card or bank account details. Ko-fi and PayPal handle information under their own Ko-fi privacy policy and PayPal privacy statement.

We publish a supporter's name only when they explicitly ask us to do so in their optional Ko-fi message or through the contact page. We manually add only the supplied name, without the payment amount or supporter's email. The name remains listed until the supporter asks us to change or remove it through the contact page.

Service providers

Vercel hosts the website and supplies analytics, Neon hosts the database, Resend delivers account emails, Ko-fi provides the support page, PayPal processes voluntary support payments, and Google or GitHub processes OAuth sign-in when you choose those options. Each provider handles information under its own privacy terms.

Retention and control

Unverified registrations are removed after their verification window has passed. Account information and reading history remain until you delete the account. From Account settings, you can download a copy of your data, change your password, or permanently delete the account.

Contact

For privacy questions or requests, use the details on the contact page.