Last updated 10 July 2026
Privacy
What we collect
Your account email and name, the books on your shelves and their reading status, your reading progress and streaks, the highlights and notes you save, the reading goals you set, and the profile details you choose to add: username, display name, bio, and avatar. If you mark something private it stays private. If you post it in a public space it is public.
How we use it
To run the product: your library, your reading position, your goals and streaks. To answer your support email. That is the whole list. We do not build advertising profiles and we do not sell your data.
Where your data lives
Foxing runs on Cloudflare. Your account and library data are stored in Cloudflare D1, our database. Book files, cover images, and avatars are stored in Cloudflare R2. Sessions live in D1 too, and cached pages in Cloudflare KV. The application itself runs as a Cloudflare Worker. Transactional email, such as sign-in links and codes, is sent through Cloudflare Email Sending. If you sign in with Google or Apple, Foxing receives your name and email address from them and keeps none of their access tokens. A passkey leaves only its public key with Foxing; the private key stays on your device. Data is processed in Cloudflare's network under its data processing terms.
Payments
Foxing is free today. When paid plans launch, payments will be handled by Stripe. Foxing never sees or stores your card number; Stripe processes it directly under its own terms.
AI features
When the AI reading companion launches, the passage you select and the book's metadata are sent to our AI provider to generate a response. The provider does not train its models on your data per its API terms, and nothing else is sent.
Cookies
We set a session cookie so you stay signed in, and it doubles as protection against cross-site request forgery. When bot protection is enabled, the sign-up form may set a short-lived verification token. There are no third-party advertising cookies and no cross-site tracking.
Your rights
You can see, correct, export, and delete your data. From settings you can download a JSON archive of everything tied to your account, and you can delete your account outright. If you live somewhere with a privacy law such as the GDPR or the CCPA, those rights apply, and we honor them for everyone regardless.
Retention and deletion
Delete your account at any time from settings. Your profile, library, reading history, highlights, notes, and goals are removed when you do. A club you created passes to the member you choose, so its members keep their discussions; a club with no other members is deleted. Operational backups are purged on a rolling basis after that.
Children
Foxing is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, write to the address below and we will remove it.