# Privacy and data (/docs/support/privacy-and-data)



## Browser extension [#browser-extension]

The extension acts only when you submit the current page. It does not continuously send your browsing
history. It submits the selected public page URL and destination choices required for the requested
reading-list or EPUB operation.

Browser-local storage keeps the extension session and remembered destination preferences. Signing out
removes the extension's local account session from that browser profile.

## Content processing [#content-processing]

* Public article pages and feed entries are fetched by the service for extraction.
* Newsletter messages are received through the private subscription inbox and sanitized for use as
  chapters.
* The original raw newsletter email is retained in private object storage for operational diagnosis.
  It can contain ordinary attachment data even though those attachments are not parsed or included
  in the EPUB.
* Generated EPUBs are retained in the account library until archived or deleted according to the
  available controls.
* Content-policy exclusions are recorded as **Not attempted** rather than silently bypassed.

## Diagnostics [#diagnostics]

Operational events and error monitoring are designed to use reason codes, operation outcomes, and
technical context instead of article bodies, account tokens, or private browser data. Do not put
sensitive content into a manual problem report.

The public Sentry DSN embedded in a web or extension build is a routing identifier, not an account
administration secret. Sentry organization auth tokens are build or deployment secrets and must never
be bundled into client code or documentation.

## Third-party delivery [#third-party-delivery]

When a book is sent, the destination email and EPUB pass through the configured email and device
provider. Amazon, Kobo-related services, Stripe, and other third parties apply their own privacy and
retention policies to the operations they control.

Before a public launch, the product's formal privacy policy, raw-email and generated-artifact
retention periods, support contact, and subprocessor details should be linked from this page and the
main application.