Privacy Policy
Last updated: 9/9/2026
1. Operator Identity
Russian Reading operates this website and is responsible for the processing of personal data described in this Privacy Policy.
2. What Information We Collect
We collect the following information:
- Email Address: For account creation and sign-in (via Supabase Auth)
- Subscription Data: Subscription status, Polar customer ID, and related data for premium access management
- Reading Progress: Your versioned reading position and completion state (synchronized to Supabase when you are signed in, with a local device cache for guests and offline use)
- Favorites: Stories you save to your shelf (synchronized to Supabase for your signed-in account)
- User Preferences: Audio volume, filter settings, and language preferences (stored locally)
- Usage and Performance Data: On public pages, Vercel Web Analytics may receive anonymous page-view data and Vercel Speed Insights may receive anonymous performance metrics, using an approved public pathname with query strings and fragments removed
3. How We Use Your Information
We use the collected information for the following purposes:
- Providing access to premium content and managing subscriptions
- Saving your reading progress and settings to improve user experience
- Processing payments through Polar
- Communicating with you about your account or subscription
- Understanding aggregate public-page usage and performance
4. Data Storage and Retention
Your data is stored as follows:
- Account and Subscription Data: Stored in Supabase (cloud database)
- Local Data: Reading progress and settings are stored in your browser's localStorage
- Payment Data: Processed through Polar; we do not store your credit card details
Account information is retained while your account remains active. If you delete your account, we will delete or anonymize personal data unless we are required to retain it for legal, tax, accounting, or security purposes.
5. International Data Transfers
Your information may be processed in countries other than your own. Where required by law, we rely on appropriate safeguards for international data transfers.
6. Cookies and Local Storage
We use your browser's local storage to support:
- A local cache of reading progress for offline continuity
- Queued progress changes while a signed-in device is offline
- Audio and filter preferences
Local caches can be deleted at any time through your browser settings. Signed-in progress and favorites are also stored in Supabase and are removed through account deletion, subject to legally required retention.
Additionally, Supabase Auth and Polar may set authentication and session cookies as part of their services.
On public pages, Vercel Web Analytics and Vercel Speed Insights may process anonymous page-view and performance data, including the public pathname, referrer, approximate location, browser or device information, and web-vitals metrics. Analytics event URLs are limited to approved public paths with query strings and fragments removed before an event is sent. This site uses an origin-only Referrer-Policy, so SDK requests receive only the site's origin in their HTTP Referer header. These controls describe this site's integration; Vercel may process other event fields described in its privacy policies. Sign-in, account, Studio, review, authentication, and private preview routes are suppressed; reading text, draft content, authentication tokens, and subscription details are not sent to these tools.
7. Third-Party Services
We use the following third-party services:
- Supabase: We use Supabase to provide authentication and database services. Your email address and account information are processed by Supabase for these purposes.
- Polar: We use Polar for payment processing and subscription management. Your payment information is processed by Polar for these purposes.
- Vercel: We use Vercel Web Analytics for anonymous aggregate public-page usage and Vercel Speed Insights for anonymous performance metrics. Their analytics event URLs are limited to approved public paths without query strings or fragments, SDK requests receive origin-only HTTP Referer headers, and the tools are not mounted for private application routes.
These services have their own privacy policies, which we encourage you to review.
8. Your GDPR Rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right to Access: You can request a copy of all data we hold about you
- Right to Rectification: You can request correction of inaccurate or incomplete data
- Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
- Right to Data Portability: You can request your data in a structured, machine-readable format
- Right to Object: You can object to the processing of your data
9. Account Deletion
You can start self-service account deletion from your Account page after a recent sign-in. The workflow removes your profile, Supabase-synchronized reading progress, and favorites, cancels renewable billing when supported, and then removes the authentication identity. Certain records may be retained or anonymized where required by law, such as billing or security records. If self-service deletion is unavailable, use the contact form.
10. Security
We take reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.
11. How to Exercise Your Rights
To exercise any of the above rights, please use our contact form:
Please include "GDPR Request" in the subject line and include the following information:
- Your email address associated with your account
- Which right you wish to exercise (access, deletion, etc.)
We will respond to your request within the timeframe required by applicable law.
12. Contact Information
If you have questions about this privacy policy or how we handle your personal data, please use our contact form: