Privacy policy

Your account and library

We store your email address, display name, optional profile photo and sign-in information. Passwords are stored as hashes. Passkeys use public-key credentials; Foxleaf does not receive your fingerprint or face data.

We store the books and information from files you import, book details and corrections, copies, shelf locations, notes, wishlists, reading progress, reviews, recommendations and social activity needed to provide these features. Import and correction jobs can continue on the server after you close the app.

Signing in with Google

If you choose Google sign-in, Google provides your account identifier, email address and basic profile information such as your name. Foxleaf uses this to create, link and authenticate your account. This sign-in flow requests basic identity permissions, not access to your Gmail, Drive or contacts.

You can manage connected sign-in methods in account settings and revoke Foxleaf’s access through your Google account. Revoking Google access does not delete your Foxleaf account or library.

Sharing and administrator access

Your sharing settings control access to your library and wishlist. When sharing is enabled, friends can browse them and anyone with the share link can see the shared book information. Recommendations, reviews and related social activity are visible to the relevant friends; a book you send to particular friends, and what you say about it, is visible only to them. If you choose to share what you’re reading, friends and members of your reading clubs can see the books you’re reading, your page and when you finish. Members of a club see each other’s names, photos and posts in it. You can mute or block other readers; they are not told. Copies, shelf locations, private notes and reading progress are not included in public library links.

Authorized administrators can manage accounts. The owner’s development tools can inspect library records, imports and correction history and fix incomplete or incorrect book data. Information you share can be copied by its recipients; turning sharing off cannot remove their copies.

Book lookups and photo recognition

Book searches and enrichment may send ISBNs, titles, authors and other book metadata to Google Books, Open Library, Metron and Google Gemini. AI-assisted recommendations may use book descriptions, subjects and previously suggested titles.

When you use photo recognition, the selected image is sent to the server and may be sent to Google Gemini and Google Cloud Vision to identify the book or cover. Avoid including people, documents or other private information in those photos. Providers process requests under their own terms and privacy policies.

Service providers and device storage

Cloudflare routes and protects traffic and can process connection information such as IP addresses and request details. Hosting and email services process information needed to operate Foxleaf and send account emails. External cover images and fonts can expose connection information to their providers when your browser loads them.

Foxleaf uses browser storage for your sign-in session, preferences and app caching. Optional notifications store a push subscription and use your browser’s push service. You can disable notifications in your browser or device settings. Sign out on shared devices.

Beta feedback

Feedback records contain your category, comment and submission time, without your account identifier or email attached. Sign-in is still required to submit feedback and limit abuse. The owner can read and delete submissions. Anything identifying you in the comment remains part of the submission; anonymous feedback cannot automatically be matched to an account for deletion.

Retention and your choices

Account and library records are retained while needed to provide the service. You can edit your information, change sharing settings and export your library. Contact us to request access, correction or account deletion; we may need to verify account ownership.

Deleting an account removes its active account and library records, but information copied by other readers may remain. Backups and operational records may retain information after changes or deletion. Backup retention varies: scheduled backups rotate, while manual and deployment backups may remain until the operator removes them. Deletion is not an immediate erasure of every backup.

Contact and updates

For privacy questions or account requests, contact [email protected].

We will update this page when practices change and revise the date above.