Privacy policy

Data collected

• Account (optional): email address if you choose to sign in via magic link or Google OAuth.
• Reading data: bookmarks, notes, collections — stored locally in your browser (localStorage / IndexedDB) if you're not logged in, or in our database if you are.
• Anonymous analytics: anonymous self-hosted statistics, no cookies. No advertising measurement.

What we don't do

• We don't sell your data.
• We don't use targeted advertising.
• We don't share your data with third parties except legal obligations.

Cookies

We use a NextAuth session cookie (httpOnly, secure) to maintain your connection. No third-party marketing or analytics cookies.

Your rights (GDPR)

You can request access, correction or deletion of your data at any time by contacting us at info@lab-ora.com. Deleting your account removes all your data from our servers.

Hosting

The application is hosted in Switzerland (Infomaniak). Switzerland is outside the EU but benefits from an adequacy decision from the European Commission, making data transfers GDPR-compliant.