Privacy & data

Your reading choices

Passport search text, reactions, excluded books, content boundaries and correction notes stay in the current browser tab. Refreshing clears that session. Completing Passport also stores a short taste summary on this device for the homepage. “Clear and restart” removes that summary.

Saved books

Nightstand saves stay in this browser’s local storage. They do not sync between devices. Older homepage saves are copied into the current Nightstand format while the original legacy copy is retained as a migration backup; clearing this site’s browser data removes all copies. Email saving is currently unavailable.

Usage analytics

We use PostHog to measure visits, Passport starts and completions, recommendation interest, Library results and homepage saves. Events use a pseudonymous browser identifier so we can measure return visits. They include book identifiers when you express interest or save, and counts rather than your individual reactions or boundaries.

We do not record sessions or automatically capture form fields. Email addresses, search text, correction notes and private email links are excluded from these analytics. Your browser may store an analytics identifier. Hosting and analytics services also receive ordinary network information, including your IP address, when handling requests.

Session downloads

The optional Passport JSON download contains your reactions, excluded books, boundaries, feedback and result history. Downloading does not upload it or subscribe you to anything. The file stays on your device until you delete it; only share it if you choose.