Privacy notice

Last updated 3 October 2026

Finepress is run by Eric Lee, an individual based in Canada. This notice says what Finepress collects. How it works, in the app's footer, lists the same things in more detail, down to each address your browser contacts. Questions and requests go to [email protected].

Without an account

• Your files are read in your browser and are not uploaded. Your library, your place in each book and your marks are stored in this browser. Clearing this site's data erases them.
• Saving a web article is the exception. Finepress sends the article's address and its image addresses to its server, hosted by Cloudflare, to fetch them. The server does not log or store them.

What is counted

• Cloudflare Web Analytics counts visits: the page address, the site you came from, and a rough browser and country. It sets no cookie.
• Finepress counts what the app does, on its own server: for example that a conversion finished, with page counts and timings. These counts carry no title, file name, search text, passage or note, and nothing that identifies you.
• Google Analytics runs only if you press Allow. It then sets a cookie that lasts 13 months. You can change your answer in How it works.

With an account

• We store your email address, a salted hash of your sign-in value, your sessions and your device names.
• Your synced books, reading places and marks are encrypted in your browser before upload. We store the encrypted copies and cannot read them. We can see their sizes and when they changed.
• Account data is stored with Cloudflare. Cloudflare also sends our emails: the verification link, the password reset, and one reminder shortly before a Pro trial ends. So it sees your email address. Signup uses Cloudflare Turnstile to stop automated abuse. Before sending a verification link, we ask Cloudflare's DNS service whether your email's domain accepts mail. Only the domain is sent, such as example.com.
• The feedback form needs no account. It sends what you type in it, which we keep as a private issue on GitHub. It uses Cloudflare Turnstile to stop automated abuse.

When you pay

Payments are handled by Paddle, the merchant of record. It collects your payment details, email address and country, and it handles tax and receipts under its own privacy notice. We never see your card number. We receive a customer reference and the state of your subscription, so your account knows whether Pro is active.

How long it is kept

• Deleting your account removes its data from our active systems.
• Database backups can hold account data for up to 30 days after that.
• An account with no activity for 365 days is removed, unless a paid plan is active.
• On Pro, a deleted synced book is kept, encrypted, for 30 days so you can restore it.

Your choices

You can delete your account from the Account panel. To ask what we hold about you, or to have it corrected or erased, write to [email protected]. We do not sell personal data, and we do not use it for advertising.

Changes

If this notice changes, the date at the top changes with it.