Privacy Policy

Effective July 30, 2026

PocketReader is an open-source, offline-first PDF and EPUB reader. This policy explains what data PocketReader processes and what happens when you optionally connect a self-hosted server or Google Drive.

Local use

By default, documents, reading progress, highlights, comments, preferences, and generated caches are stored locally in your browser using browser storage such as IndexedDB and local storage. Local text-to-speech runs on your device. PocketReader does not include advertising or analytics telemetry.

Google Drive synchronization

If you choose Continue with Google, PocketReader requests the limited drive.file permission. PocketReader uses this permission to create a visible PocketReader folder in your Google Drive and to create, read, update, download, or delete only the documents and synchronization metadata made available to PocketReader under that permission. Metadata can include reading position, highlights, comments, voice choice, and translation settings.

Google access tokens are kept temporarily in browser memory and browser session storage so that a page reload does not immediately require authorization again. They are not placed in URLs or sent to a PocketReader developer-operated server. Session credentials expire and are removed when you disconnect. PocketReader does not sell Google user data or use it for advertising, credit decisions, or user profiling. Google user data is used only to provide the Drive synchronization feature requested by you.

PocketReader's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Self-hosted server

If you configure and sign in to a self-hosted PocketReader server, documents and synchronization data are sent to that server. The server operator controls that deployment and is responsible for its security, retention, and privacy practices. Choosing self-host synchronization disables Drive synchronization for the active session.

Reading summary emails

A self-hosted PocketReader server can use the account email address also used for password recovery to send weekly, monthly, and yearly reading summaries. These summaries are generated from synchronized reward data and can include active reading time, reading-day count, earned growth points, trees completed during the summary period, and the reflections saved when those trees were planted. The server stores the email preference, browser-reported timezone, and a delivery record used to prevent duplicate messages. You can turn all reading summary emails off in PocketReader Settings.

Translation

Translation is optional. When you request a translation, the selected text can be sent to a translation service or to your configured self-hosted server to produce the result. Do not submit text you do not want processed by the selected translation provider.

Sharing and retention

The PocketReader project does not sell or rent personal data. Data may be processed by Google when you explicitly use Google authorization, Drive, or translation features, subject to Google's terms and privacy policy. Files stored in Drive remain in your account until you delete them. Disconnecting PocketReader does not automatically delete the PocketReader folder or its contents.

Your controls

• You can use PocketReader without connecting Google Drive or a self-hosted server.
• You can remove locally stored documents and highlights from PocketReader.
• You can opt out of reading summary emails from PocketReader Settings.
• You can delete PocketReader files directly from your Google Drive.
• You can revoke PocketReader's Google access from your Google Account connections.

Changes

This policy may be updated when PocketReader's behavior changes. The effective date above identifies the current version.

Contact

Questions about privacy can be sent to charlesneimog@outlook.com or raised in the project issue tracker.