Privacy policy

Last updated: October 27, 2026

EPUB Reader (the web app at this site, including its Google Drive integration) does not collect, sell or share personal data. It has no server of its own: the site is static files, and everything the reader does happens in your browser.

Google user data

When you open a file from Google Drive with EPUB Reader, the app asks Google for permission with the scope drive.file. With it, the app can read only the files you open with it (and files it would create, which it does not). It cannot list or read anything else in your Drive.

• What is accessed: the file you chose (its content, name, type, size and checksum).
• How it is used: the file is downloaded directly from Google's servers into your browser so you can read it. The checksum lets the app skip a second download when you open the same unchanged file again.
• Where it is kept: in your browser's storage (IndexedDB) on your device, together with your reading position, highlights, notes and bookmarks. Nothing is sent to us or to anyone else.
• Access token: Google's short-lived access token stays in your browser tab's session storage and is discarded when the tab closes or after an hour.
• Sharing: Google user data is not transferred to anyone, not used for advertising, and not read by humans.

EPUB Reader's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove the app's access at any time in your Google Account under Third-party apps and services. To delete the books and notes the reader keeps, remove them from its library (they go to a trash that empties after 30 days, or delete them there at once), or clear this site's data in your browser.

Network requests

• Google: sign-in (accounts.google.com) and the Drive API (www.googleapis.com), only to open a file you chose.
• Define: when you select a word and click Define, only that word is sent to Wiktionary's public API (en.wiktionary.org). See the Wikimedia privacy policy.
• Pro purchases are processed by Lemon Squeezy (lemonsqueezy.com) on their checkout page. The app only sends the license key you paste to Lemon Squeezy's license API to check that it is valid, with a random instance name. See lemonsqueezy.com/privacy.
• Read aloud uses the voices of your browser. If you pick an online voice, your browser sends the text being read to its provider's speech service; local voices stay on your device.

The site sets no cookies and uses no analytics. The host serving the files may keep standard access logs (IP address, time, page), as any web server does.

Contact

Questions or requests: [email protected].