Your privacy in ReadRex

Open pilot · Updated October 27, 2026

What we keep

ReadRex stores your sign-in identity, profile, saved links, reading progress, ratings, notes, tags, recommendations, chosen sources, friendships, and reports. Google or Apple handles sign-in; ReadRex does not receive your password. Apple’s private email option is supported when Apple sign-in is available.

Who can see it

New saves start privately on Up next. You can choose approved friends as your default in preferences or change visibility per read. Existing reads keep their current choices. Finished is your reading history; only explicitly recommended reads are endorsements. Notes and tags stay private. Recommending an item is a separate choice; reading or finishing never automatically recommends it. A shared recommendation can include your comment, rating, and reading dates.

Chrome extension

When you click the toolbar dinosaur, the extension sends the selected page’s URL and title to your ReadRex account. It uses your account ID and display name to identify your library, and browser-managed ReadRex session cookies authenticate its HTTPS requests. It does not read passwords or copy cookies into extension storage. Only the links you choose to save are collected; the extension does not collect your general browsing history, read unrelated tabs or page bodies, or send analytics. Closing the popup does not cancel a save already sent. A failed confirmation can be retried without changing an existing read’s privacy or progress.

Information received through the Chrome extension is used to provide, maintain, and secure its saving and library features, in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell this data, use it for advertising or lending decisions, or transfer it for unrelated purposes. Transfers are limited to providing the service, security, or legal requirements. Human access is limited to your consent, security or legal needs, or anonymized aggregate operations.

Storage and connections

The service runs on OpenAI Sites and Cloudflare. Sign-in providers process their own login flows. On the website, public link metadata and selected publication feeds may be fetched from the source publisher. The first public iOS release limits automatic previews and new offline text to ReadRex-authored guides; other links open at their source. Book searches send your query to Open Library to retrieve titles, authors, publication years, and book links. Original links open at the publisher, under its privacy policy. ReadRex has no advertising or tracking SDKs. Sign-in session records can include the connection address and browser or device information for account security.

Your device can store an offline library and unsent edits. iOS sign-in credentials are kept in the device-only Keychain shared with the ReadRex Share Extension. Signing out clears this device’s account cache. Unsent account-bound shares remain isolated for that account until sent or removed. Previously downloaded content on another reader’s device may remain until it syncs.

Amazon affiliate links

As an Amazon Associate I earn from qualifying purchases. ReadRex’s website automatically adds its affiliate tag to Amazon links offered with book recommendations. ReadRex may earn a commission when you follow one of these links and make a qualifying purchase. The commission goes to the ReadRex operator; it does not change recommendation ranking or pay the reader who recommended the book.

Amazon receives the book search or product you choose and ReadRex’s affiliate tag only when you open the link. ReadRex does not include your account ID, private notes, reading dates, or recommendation comments in that link, and it does not contact Amazon when you save or recommend a book. Amazon may use cookies and its own account information to attribute purchases under its privacy policy. Your original saved source link remains available. The first public iOS release does not generate Amazon purchase or affiliate links. It opens the original links readers chose to save.

Service usage and operating limits

To keep this free service reliable and affordable, we count API requests, database work, new saves, moves to Finished, and explicit recommendations. Account-linked daily activity counts support active-account totals and are removed after 90 days during the next owner usage-dashboard request, or when you delete your profile. Aggregate daily counts follow the same 90-day cleanup; monthly budget totals are kept for approximately 13 months. This operational measurement does not collect saved URLs, titles, notes, searches, raw connection addresses, or individual reading histories in the usage records. It is separate from optional visitor analytics and is not used for advertising or feed ranking.

Operating safeguards can temporarily pause optional fetching, new signups, or new saves. Existing library access, privacy controls, export and deletion remain available. Failed or paused captures are not reported as successful saves.

Optional visitor analytics

If you allow it, ReadRex stores a random browser identifier for up to 90 days and a visit identifier that expires after 30 minutes without a page visit. We measure visits to general app pages, referring domains, and campaign labels. We do not collect reading history, saved links, notes, search terms, email addresses, or IP addresses for visitor analytics, and we do not send this analytics data to an advertising service.

Visitor records are retained for up to 90 days and removed during the next analytics collection or dashboard request. Your browser’s Do Not Track or Global Privacy Control signal disables visitor measurement. Declining analytics does not limit access to ReadRex. Successful pilot joins are counted from membership records even when visitor measurement is off; the owner can see aggregate counts and traffic sources. Account deletion removes the account link and visit association from a sign-up record; anonymous sign-up totals remain.

To protect the analytics endpoint from abuse, the server also uses a keyed, daily-changing value derived from the connection address. It is kept separately from visitor data, never shown in the dashboard, and removed after 24 hours during the next accepted collection request. The raw address is not stored in these rate-limit records.

Your controls

Export your library or delete your account in Settings. Deletion removes your profile and personal library records from the active service and revokes ReadRex sessions. Other readers’ independent copies of saved links remain theirs. Operational backups may be retained by the hosting provider under its policies.

Questions

ReadRex is operated by Aaron Bailey and is open for anyone to join. For privacy or support requests, email aaroncbailey@gmail.com. You can also report an item from its menu inside ReadRex.