Privacy

Your email address, and either a one-way hash of your password or the identifier Google gives your account. Your language. Everything you write: books, readings, highlights and notes, reflections, ratings and Up next lists. It is all kept until you delete your account, as described below.

Images you upload from 29 October 2026 lose their hidden details, such as where they were taken, before they are stored; images uploaded earlier are kept as they were sent. Only you can open the photos of your passages. For each device you sign in on, its IP address and browser are kept until you sign out on it or delete your account.

Render runs the server, Vercel the web pages, Supabase holds the database and Cloudflare R2 the images, the encrypted database backups and a daily copy of the images, kept unencrypted in the same private backup storage. Their logs record the IP address of each request. Resend sends the account emails, so it sees your email address and what they say.

If you sign in with Google, Google confirms your email address and account, and they are used only to sign you in and to send your account emails. Google’s sign-in script runs on the login and register screens, and when an account that signs in with Google confirms its deletion; there it may set Google’s own cookies.

To find a cover or a book’s details, the server sends Google Books and Open Library the title, author or ISBN, then fetches the cover image itself, never saying who is asking. To suggest what to read next, it also sends Open Library the author and series names from your library, the names of genres from a fixed list, and the title and author of your books, to find their genre and catalogue entry, again never who is asking. When something breaks, Sentry receives an error report with an account number and nothing else personal.

Nothing you keep is public, and no other reader can see it.

Nothing is sold. There are no ads, no analytics and no trackers. Marginalia’s only cookie remembers your language.

Delete account, on the Your account page, deletes your account and everything in it at once, and your images right after. You confirm with your email address and your password, or through Google if that is how you sign in. Every device is signed out. Copies then remain in the daily backups for up to 30 days, and briefly in the hosts’ logs.

Before you go, Download JSON and Download Markdown, on the same page, download everything you wrote. Images are not included.

Everything you write can be seen, corrected, exported and deleted from inside Marginalia. To change your email address, to ask what else it holds about you, or for anything else, write to privacy@readmarginalia.app. If what Marginalia keeps changes, this page changes first, with a new date at the top.