Privacy Policy

Account. When you sign in with Google, we receive your email address. That's the only Google account data we ask for.

Instapaper. To connect Instapaper, we ask for your username and password once. That password is sent over HTTPS, exchanged with Instapaper for an access token, and immediately discarded — it is never written to our database, never logged. Only the resulting token is stored, encrypted at rest. You can disconnect at any time, which deletes it.

Delivery settings. Your timezone, delivery hour, lookback window, archive settings, feed subscriptions, and pause state — all needed to run your morning delivery.

Billing. If you subscribe, our payment processor Paddle collects and stores your payment details directly — we never see or store your card number. We keep a record of your subscription status (trialing, active, canceled) and trial end date so we can run the service and remind you before you're charged.

We don't use tracking cookies or third-party ad pixels anywhere on this site or in the product.

To run the service: sign you in, fetch the articles you've saved, deliver them to your Kobo or Kindle on your schedule, and handle billing. We also send a small number of transactional emails — a reminder before your trial converts to paid, and operational notices about your account. We don't send marketing email unrelated to the product.

We use a small number of infrastructure providers to run OnPaper. None of them get to use your data for their own purposes — they only process it to do the job we hired them for:

• Google — authenticates your sign-in; we only receive your email address.
• Instapaper — stores the articles you save; we read them on your behalf using your connected account.
• Paddle — our payment processor and merchant of record. Paddle handles your card details, receipts, tax, and the actual charge; we never see your card number.
• Resend — delivers transactional emails (trial reminders, account notices) on our behalf.
• Cloudflare — hosts the site and service and stores your account data in its database (D1).

We don't sell, rent, or share your data with anyone else. No ad networks, no marketing platforms, no third-party pixels.

We use one cookie: a session cookie that keeps you signed in. It identifies your session, nothing more. No cross-site tracking, no ad cookies, no analytics cookies.

You can disconnect Instapaper, pause deliveries, or remove feeds at any time from your account settings. To delete your account entirely or ask any question about your data, email [email protected] — we'll act on it directly, no questions asked.

The version here is always the current one. Anything material gets called out by email, not buried in a diff.