Privacy Policy

Account. When you sign in with Google, we receive your email address. That's the only Google account data we ask for.

Instapaper. To connect Instapaper, we ask for your username and password once. That password is sent over HTTPS, exchanged with Instapaper for an access token, and immediately discarded. It is never written to our database, never logged. Only the resulting token is stored, encrypted at rest. You can disconnect at any time, which deletes it.

Delivery settings. Your timezone, delivery hour, lookback window, archive settings, feed subscriptions, and pause state, all needed to run your morning delivery.

Billing. If you subscribe, our payment processor Paddle collects and stores your payment details directly. We never see or store your card number. We keep a record of your subscription status (trialing, active, canceled) and trial end date so we can run the service and remind you before you're charged.

Payment recovery. Paddle's own script (Paddle.js) runs on this homepage, not just at checkout. If you're a subscriber and a payment fails, it's what lets a recovery email take you straight into fixing it instead of a full checkout flow. It isn't an ad tracker and doesn't share anything with ad networks; see "Cookies & tracking" below for exactly what it sets.

We don't use third-party ad pixels or ad-tracking cookies anywhere on this site or in the product.

To run the service: sign you in, fetch the articles you've saved, deliver them to your Kobo or Kindle on your schedule, and handle billing. We also send a small number of transactional emails: a reminder before your trial converts to paid, and operational notices about your account. We don't send marketing email unrelated to the product.

We use a small number of infrastructure providers to run OnPaper. None of them get to use your data for their own purposes. They only process it to do the job we hired them for:

• Google: authenticates your sign-in; we only receive your email address.
• Instapaper: stores the articles you save; we read them on your behalf using your connected account.
• Paddle: our payment processor and merchant of record. Paddle handles your card details, receipts, tax, and the actual charge; we never see your card number. Paddle's script also runs on this homepage to enable one-click payment recovery for subscribers.
• Resend: delivers transactional emails (trial reminders, account notices) on our behalf.
• Cloudflare: hosts the site and service and stores your account data in its database (D1).

We don't sell, rent, or share your data with anyone else. No ad networks, no marketing platforms, no third-party pixels.

On the app itself (api.getonpaper.app), we use one cookie: a session cookie that keeps you signed in. It identifies your session, nothing more.

On this homepage, Paddle's script sets its own identifiers so it can recognize a returning subscriber and route a payment-recovery email into a one-click fix (see "Payment recovery" above). That's the only thing it's used for here; it doesn't run on the app pages where you actually use the product. No ad cookies, no analytics cookies, no cross-site ad tracking, on either domain.

You can disconnect Instapaper, pause deliveries, or remove feeds at any time from your account settings. To delete your account entirely or ask any question about your data, email hello@getonpaper.app: we'll act on it directly, no questions asked.

The version here is always the current one. We may update this policy from time to time to reflect changes to the product or our practices.