Draft, pending review. This describes what the software actually stores.
An account holds an email address and a password hash (argon2id). We store your reading position, your shelf and downloads, your preferences, your subscription and purchase records, and a credit ledger if you hold credits.
We record product events — chapters opened and completed, searches performed, paywalls shown, experiment assignments. Search terms are among them.
There are no cookies, no third-party scripts, and no advertising identifiers. Google Fonts is the one third party that sees your IP address, because the site loads fonts from it. Deleting your account erases everything above.