Privacy Policy
1. Who we are
Zephread is an independently operated software project. For privacy questions or requests, contact contact@zephread.com. Zephread determines how personal data described in this policy is handled.
2. Scope
This policy covers zephread.com, messages sent to our contact address and the current Zephread Early Access desktop application. It does not cover third-party websites linked from our pages.
3. Data the desktop application handles
Zephread is designed as a local-first reader. Files you open, your library information and your highlights remain on your device in the current version and are not uploaded to Zephread servers. No account is required.
4. Website and security data
When you visit the site, Cloudflare may process IP address, approximate location derived from IP, device and browser information, requested URLs, timestamps and security signals to deliver the site, prevent abuse and maintain availability. We do not use this data for behavioral advertising.
5. Messages you send us
If you email us, we receive your email address, message, attachments and standard message metadata. We use them to answer your request, provide support, handle privacy or legal inquiries and protect against abuse. Do not send reading files or sensitive information unless we specifically request it.
6. Preferences, cookies and analytics
The site does not currently load advertising or analytics scripts and does not set non-essential cookies. If you choose a language or appearance, the browser stores that preference locally. Cloudflare may set strictly necessary security cookies only when required to detect malicious traffic or complete a challenge. See the Cookie Policy for details.
7. Purposes and legal bases
We process limited data to provide and secure the site, respond to requested communications, meet legal obligations and establish or defend legal claims. Where laws such as the GDPR apply, the bases are performance of requested steps or a contract, legitimate interests in operating and securing the service, legal obligation, and consent only where we expressly ask for it.
8. Service providers and international transfers
Cloudflare provides hosting, content delivery, DNS and security services. Zoho Mail provides email hosting. These providers may process data in multiple countries under their own security measures and lawful transfer mechanisms. We do not sell personal data or share it for cross-context behavioral advertising.
9. Retention
Local reading data remains under your control on your device. Contact messages are retained only as long as reasonably necessary for support, recordkeeping, security and legal obligations, normally no longer than 24 months unless a longer period is required. Browser preferences remain until you change them or clear site data. Infrastructure logs follow the provider retention settings available to us.
10. Your rights
Depending on your location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent where processing relies on consent; and complain to a competent data protection authority. We may need to verify your identity and may retain information where law permits or requires it.
11. Security and children
We use proportionate technical and organizational safeguards, but no internet service is completely secure. Zephread is not directed to children under 13 or the higher minimum age required locally, and we do not knowingly collect their personal data.
12. Changes and contact
We may update this policy when the product or law changes. Material changes will be identified by the updated date. Send questions or rights requests to contact@zephread.com.