Privacy Protocol

01 — What we keep

Account credentials

If you sign up with email, GitHub, or X, we store the email address and provider ID returned by Supabase (our auth backend). No passwords ever touch our servers — third-party providers handle that.

Saved articles & preferences

When you save an article, follow a category, or change a setting, we persist those choices against your account so the app behaves consistently across devices.

Anonymous analytics

We log aggregate page views and feature interactions so we know which sections of the cosmos people actually visit. No personal data is attached to these events.

02 — What we don't keep

• We do not sell or rent your data to advertisers, brokers, or third parties.
• We do not build cross-site behavioral profiles.
• We do not run third-party ad networks or tracking pixels.
• We do not store the content of articles you read — only that you read them, if you saved them.

03 — Cookies

Cosmic Reader sets one essential cookie used by Supabase to keep you signed in. We may set a short-lived session cookie to remember your read state across page reloads. We do not set advertising cookies.

04 — Third parties we rely on

• Supabase — authentication and database hosting.
• Vercel — site hosting and serverless functions.
• Google Fonts — typography. Hits Google directly when you load a page.
• wsrv.nl — an image proxy that caches article thumbnails so they load consistently.
• RSS publishers — when you click an article you leave this site and land on the publisher's domain, subject to their privacy policy.

05 — Removing your data

To delete your account and everything we have on it, email hello@cosmicreader.app from the address you signed up with. We'll confirm receipt within two business days and wipe your record within seven days. An in-app self-service "Delete Account" control is on the roadmap.

06 — Contact

Questions, concerns, or vulnerability disclosures: hello@cosmicreader.app.