Privacy policy

readinglist.live is a hobby project built and run by me, Britt Crawford, as Snugglebear Team Company. When this page says “I”, it means me. It covers the website, the podcast feeds it publishes and the iOS app.

You sign in with Google or with Apple. Google gives me your name, your email address and the address of your Google profile picture. I store those, plus the account link and tokens Google returns when you sign in.

With Sign in with Apple, Apple gives me your email address, or a private relay address if you pick Hide My Email, and your name only the first time you sign in, if you share it. Without a name, your profile is named after the part of your email address before the @. I store those, plus the account link and tokens Apple returns. Deleting your account asks Apple to revoke those tokens.

I also create a profile for you: a random four-word name that becomes the address of your feed, an API token for saving articles from other apps, your choice of voice, and when you signed up.

Your avatar on the site comes from Gravatar, looked up from a hash of your email address. Your browser loads it from Gravatar directly.

Staying signed in uses a cookie holding an encrypted session token. The light or dark theme you pick stays in your browser's local storage.

When someone new signs up, I get an email with their name, email address, profile name and the articles they've saved so far.

The iOS app keeps your sign-in token on your phone so it can send pages you share to your reading list.

When you save an article (on the website, with the bookmarklet, through the API, from the iOS app, or through an app you've connected with OAuth), I store:

• the URL and when you saved it
• a copy of the page as it was fetched, and its icon
• a readable version with the navigation and ads stripped out, a plain-text copy, and the script the voice reads from
• a summary, a short description and tags written by an AI model
• descriptions of the code blocks and images in the article, written by an AI model (you can turn these off on your profile page)
• the generated audio
• any tags you add yourself

I also make weekly digest episodes that summarise what you saved that week, from the summaries above.

Turning an article into a podcast means sending it to a few other companies:

• Amazon Polly (Amazon Web Services, United States) reads the article text aloud and makes the audio.
• Cerebras writes the summaries, descriptions, tags and weekly digests from the article text.
• OpenAI describes code blocks in articles, and writes your feed's description and categories from your articles' summaries.
• Groq describes images in articles. It gets each image's address and alt text.

Requests to Cerebras, OpenAI and Groq go through Cloudflare AI Gateway. Each company handles what it gets under its own terms. Which AI provider does which job is configuration I change now and then; when it changes, this page changes too.

I don't train any AI models on your data.

The website and all the processing run on Cloudflare Workers. Your account and saved articles are in a Cloudflare D1 database. Page copies, readable versions, feeds and audio are in Cloudflare R2 storage. Amazon Polly writes the audio files it makes to Amazon S3.

Cloudflare keeps request logs for the site and workers, which I use to fix problems.

There are no analytics, no tracking scripts and no ads. I don't sell your data, and I don't share it with anyone beyond the services named on this page.

Nothing is listed or searchable, but some things open without signing in, for anyone who has the link:

• Your podcast feed, at feeds.readinglist.live/feeds/ followed by your four-word profile name, and the audio in it. Podcast apps can't sign in, so the feed has no password; the random name is what keeps it private.
• Your reading list page and its weekly pages, which list what you've saved.
• Each readable article page, whose address is worked out from the article's own URL.

Reading list pages ask search engines not to index them, and article pages are blocked in robots.txt, but only well-behaved search engines listen. If you share one of these links, treat what's behind it as public.

I keep your account and everything you've saved until you delete your account. Records of processing errors are deleted after 30 days, and the history of background jobs after 90 days. Request logs last as long as Cloudflare keeps them.

You can delete your account at readinglist.live/account/delete. That removes your profile and your reading list: the pages you saved and when you saved them, their tags, your weekly summaries and your feed.

The fetched copies of articles, their summaries and the generated audio files stay. They're shared by everyone who saves the same page, so other readers' feeds keep working.

If this policy changes, I'll update this page and the date at the top. Questions about any of it? Email me at readinglist@snugglebearteam.com.