Privacy

Updated October 31, 2026

This notice explains how PsychArch handles information when you use your PsychArch account, PsychArch Reader and this website.

Information we collect

We store your email address and verification status. If you sign in with Google, we also receive your Google account identifier, name, and profile image URL. Sign-in records may include your IP address, browser information, and session expiry. If you enable a password, we store a protected record used to verify it, never the password as plain text.

Reader stores the text, Markdown, and images you upload, together with titles, timestamps, expiry settings, and read and share status. When you connect an application, we record the permissions you approve and information needed to maintain that connection.

If you sign in with Apple, we receive your Apple sign-in identifier, verified email address or private relay address, and any name you choose to share. We retain encrypted credentials needed to revoke Apple authorization and process Apple's signed account and email-forwarding notifications.

How we use information

We use this information to manage your account, keep you signed in, deliver verification emails, provide your reading library and sharing features, and protect the service from abuse.

Who can access information

Hosting and storage providers process account information, saved content, and network requests to deliver the service. Cloudflare hosts PsychArch and its storage. A security-check provider processes browser and network information to help prevent automated abuse.

Our email delivery provider receives your email address and verification messages and may retain sending and delivery records. Open and click tracking are disabled.

Google handles sign-in when you choose that option. We never receive your Google password or request access to Gmail, Drive, or Calendar.

Apple handles sign-in when you choose that option. We never receive your Apple password. If you use Hide My Email, Apple forwards messages through its private relay when forwarding is enabled.

Connected applications receive the identity details and access you approve. Administrators can review account details, sign-in sessions, and application connections, and manage which applications are available to your account. Making an application available does not replace your consent to connect it.

Cookies and retention

We use essential cookies to maintain and protect sign-in, with no advertising or analytics trackers. Account sessions last seven days and renew during use. Email verification codes expire after five minutes and become invalid after use. Expired sign-in and temporary abuse-prevention records are removed during regular cleanup. Account information remains until you delete your account.

Reader items expire after the period selected when they are uploaded: one hour, one day, three days, or seven days. Expired items become unavailable and are removed during regular cleanup. You can also delete items before they expire.

Your Reader library is private unless you share an item. Anyone with its share link can read it until you stop sharing, delete it, or it expires. Revoking a link stops access through that link; sharing the item again creates a new link, and the revoked link stays invalid. Anyone who downloads a copy can keep it independently.

Reader can keep copies on your device for offline reading. Devices clear private copies when they reconnect and detect revoked access. We cannot remotely erase copies on devices that remain offline or copies other people have downloaded.

Managing access

Signing out ends that browser's account session. It does not disconnect applications or erase their downloaded copies. You can review and disconnect applications from your account; disconnecting stops further authorized access but does not delete your Reader library.

Changing your password signs out other account sessions while keeping your current browser signed in. Application connections remain active until you disconnect them. If an administrator removes an application's availability, its connection is revoked. Suspending your account prevents sign-in and revokes account sessions and application connections.

Deleting your account

Use the account deletion page, Account → Delete account in the iOS app, Settings → Delete Account in the macOS app, or Settings → Delete account in the Windows app. Sign in again with the same account and confirm. Deletion revokes sign-in sessions and application access and removes your account information, Reader articles, images, public shares, and related records. If deletion cannot finish immediately, it remains in progress and retries automatically.

A limited record identifying the deleted Reader account remains for 31 days after cleanup to prevent delayed requests from restoring data. A deletion-status receipt remains for seven days. Temporary security records expire through regular cleanup; hosting backups and email delivery records follow the respective providers' retention policies. Copies you exported or saved independently, and copies on an offline device, may remain on that device.

Reader apps and extensions

Sign-in and tokens

PsychArch Account handles sign-in and asks for your consent to connect Reader. Reader uses your account identifier, display name and email address to identify your account. The web reader keeps its own browser session and does not send OAuth access or refresh tokens to browser scripts. The iOS and macOS clients store their account tokens in Keychain. The Windows client stores its refresh token in Windows Credential Manager. Browser extensions store tokens in local extension storage, never browser Sync; Chromium storage is restricted to trusted extension contexts. Extension account details remain in settings-page memory and clear on sign-out.

Clipboard, sharing and imports

The macOS and Windows apps read clipboard text only when you choose to upload it or use an upload shortcut. The iOS app uses an explicit Paste button. Its Share and Action extensions import content only when you select Send to Reader and save the draft. Safari capture can extract selected text or the article available in the loaded page. A shared link can be retrieved without your browser cookies; the source website receives the network request.

Browser extensions

Clicking the extension toolbar button captures the current article locally and uploads its title, source URL and extracted content to your Reader library. On ChatGPT, it captures the loaded assistant responses according to your selected scope; prompts and hidden alternatives are excluded. A save requested during generation waits for completion. Accepted content may stay in extension session storage briefly for delivery retries and is removed when delivery ends; it is not synced or kept across browser sessions. The extensions do not read your browser's history database. Capture and delivery work run only for a save you request.

The optional Jina fallback is off by default. If you enable it and grant access, a failed article extraction sends the original page URL to r.jina.ai to retrieve the article. That URL can contain private query information; use this option only for public articles. Jina receives the request and its network information. The fallback does not receive your Reader tokens and is not used for ChatGPT captures. Notifications can display a saved article title or an error on your device.

External images

Markdown documents can load images directly from external hosts. Those hosts receive your network address and request timing, even when the document is private in Reader. Reader sends no referrer with those image requests. Embedded external images are not saved for offline reading.

Offline copies

The installed web app can keep private reading on your device for offline use. Copies expire with the source item. Signing out or switching accounts clears Reader's private offline copies in that browser. Revoking account access cannot erase copies from a device while it is offline.

The iOS client can save and read documents without an account. Signing in automatically synchronizes guest saves with that account. Unsynced originals remain on the device until synchronized or deleted; the selected server retention begins when uploaded. Originals can be included in normal device backups; downloaded cache bodies are excluded. Signing out removes downloaded account copies and retains unsynced originals and pending operations hidden under their original account, accessible again only after that account signs in. Account settings can discard retained saves. iOS displays placeholders for external Markdown images.

Service operation

Reader stores document-opened and completed states to synchronize reading activity, and daily upload counts to enforce account limits. Service logs record request identifiers, route templates, response status and duration for reliability and troubleshooting. These Reader log entries omit account identifiers, document identifiers and document content. PsychArch Account retains session network addresses and browser information for account security. Cloudflare processes network requests to host and protect the services. Reader does not use advertising or cross-app tracking.

This website

psycharch.com has no analytics scripts, advertising, or account sign-in cookies. Opening Reader or PsychArch Account opens a separate service with its own session. Cloudflare processes requests to deliver these sites.

Contact

For questions about your information or help with a privacy request, email psycharch.com@gmail.com.