Privacy policy.
Effective 11 May 2026
Plain English version, no legalese. If something is unclear, open a GitHub issueand I'll clarify both the text and the practice.
Reading is anonymous by default
You can browse every text, every verse, every Foundation article, every Tirthankara page, and use search — without signing in, without an account, without any data leaving your device. This site does not run analytics scripts (no Google Analytics, no tracking pixels, no third-party trackers).
When you sign in
Sign-in is optional and exists only so your reading progress can follow you across devices. If you choose to sign in, here is exactly what is stored:
- Your email address — used solely as your identifier and to send you the one-time sign-in link. It is not used to send marketing emails. It is not shared.
- A randomly generated user ID — used internally to associate your reading data with your account.
- What verses you have opened, when, and how often — to power your “Recently read” list and verses-read counter.
- What verses you have bookmarked — so they sync across devices.
- What verses you have marked as memorized — for your memorized count.
- The dates you opened the site — to compute your day streak.
That is the complete list. No IP addresses are logged separately for analysis. No device fingerprinting. No location tracking. No reading content (other than which verse) is recorded.
Where the data lives
Authentication and per-user data are stored in Supabase, a Postgres-based platform. The database is hosted in the AWS Mumbai (ap-south-1) region. Access is restricted by Row-Level Security policies — meaning your account can only read or write its own rows; no other user can see your data, and no public client query can return another user's rows.
Sign-in emails are sent through Supabase's shared email infrastructure (the sender shows as noreply@mail.app.supabase.io) — they handle delivery, not me.
Browser storage
The site uses your browser's localStorage to remember:
- Your sign-in session token (if signed in), so you don't have to sign in again on every visit
- Your theme preference (dark or light)
- Your bookmarks and memorized list (cached locally for offline use, also synced if signed in)
- Your last-read verse, so the “continue reading” card works
No third-party cookies are set. You can clear this any time from your browser settings — the site continues to work; you just lose those local preferences.
What we do not do
- No advertising. No ad networks. No retargeting.
- No selling, renting, or transferring your data to anyone.
- No analytics services (Google Analytics, Mixpanel, Plausible, etc.) — none are installed.
- No social-media tracking pixels.
- No emails beyond the sign-in link you explicitly requested.
Your rights
You can, at any time:
- Sign out — clears the session from this device.
- Stop signing in — your existing local data remains on your device; the server keeps your account inactive until you delete it.
- Request a copy of your data — open a GitHub issue with the subject “Data export” from the email you signed up with, and I'll send you a JSON dump.
- Delete your account — open a GitHub issue with the subject “Delete my account” from the email you signed up with. Within 7 days your account and all associated rows (reading history, bookmarks, memorized list, day activity, profile) are permanently removed.
Children
The site is appropriate for readers of any age, but sign-up is intended for users 13 and over (consistent with Supabase's terms). Anyone younger can use the site fully without signing in.
Changes
If this policy changes materially, the effective date above will update and a note will be added to the site. The commit history of this page is also public on GitHub, so every change is auditable.
Contact
For anything privacy-related, the fastest channel is a GitHub issue. The repository is maintained by the same person who built the site.