Privacy
Last updated: 31 August 2026
Nekoreader keeps your books and your notes in your own account. No ads, nothing sold to anyone, no tracking around the web. This page says exactly what is kept and where.
What is kept
Your email address and your name, as Google gives them when you sign in. There is no password: the app never asks for one, never stores one, and has none to lose.
The files you upload, the passages you highlight, the titles and notes you write on them, the pages you bookmark, and the page you stopped on in each book.
A readable name for each device you read on, worked out from your browser — “Chrome on Windows”, “Safari on iPhone”. It exists so the app can offer to pick up where your other device left off. It is a label for a browser, not an identity.
Where it lives
In a Supabase project: the text in a Postgres database, the files in a private bucket. Nothing in that bucket is public — your files are opened through links signed for you that expire on their own.
Every table has row level security tied to your account. Someone else signed into the app cannot read your rows, and neither can a visitor who is not signed in at all.
What stays on your device
Books you make available offline, a copy of your highlights, and the text of the book used for searching are kept in your browser's own storage — along with the queue of changes that lets you read and mark things without a connection.
Signing out erases all of it from that browser.
Who else is involved
Supabase stores the data and handles signing in. Vercel serves the app and, like any web server, sees the requests that reach it.
Signing in goes through Google, which tells the app your email address and your name — nothing else, and nothing is sent back to Google.
Reading a scanned page uses OCR that runs on your own device. The first time, your browser downloads the language data from a public tesseract server. The page itself never leaves your device; only the dictionary comes in.
Cookies
Two, and neither one follows you: the session cookie that keeps you signed in, and neko_lang, which remembers the language you picked. There is no analytics cookie and no advertising cookie.
What is not done
Your files are not read by a person, not analysed, and not used to train anything. Nothing is sold or handed to a data broker. There are no ads and no third-party tracking scripts.
Deleting
Deleting a book deletes the file and everything attached to it — highlights, notes, bookmarks, position. It happens immediately and cannot be undone.
To delete the whole account, write to nicholetas@gmail.com and it is done, files included.
Changes
If this page changes in a way that matters, the date at the top changes with it.
Questions: nicholetas@gmail.com