# Privacy Policy

_Last updated: 29 October 2026_

Relego is free, open-source, self-hosted software. This policy covers every part of the project: the Relego server, the `relego` CLI, the web interface, the browser extension, the install scripts, and the [relego.app](https://relego.app) website.

## Summary

- Relego runs on infrastructure you control. The project does not run any service that receives, stores, or processes your highlights, reading activity, or account details.
- Relego does not sell, rent, or share your data, and does not use it for advertising.
- The Relego software (server, CLI, web interface, browser extension) contains no analytics, telemetry, or tracking.
- The relego.app website uses privacy-friendly, cookieless visit analytics (see [Website](#website)).

## Data handled by Relego

All data below stays on the machines you run Relego on, unless you configure it to be sent somewhere (for example, your email provider).

| Data | Where it comes from | Where it is kept |
| --- | --- | --- |
| Highlights, book titles, and authors | Your Kindle (`My Clippings.txt`), your Kobo (`KoboReader.sqlite`), or your Kindle Notebook via the browser extension | Your Relego server's SQLite database |
| Recap preferences, exclusions, and weights | What you set in Relego | Your Relego server |
| Delivery addresses (Send-to-Kindle email, inbox email) | What you configure | Your Relego server |
| SMTP server settings and credentials | Environment variables or configuration you provide | Your Relego server |
| Browser extension settings (server address, connection token, selected Amazon region) | What you enter in the extension | Your browser's local extension storage |
| Application logs | Generated by the server | Your Relego server |

## How each component uses data

### Server

The server stores the data in the table above and uses it to build recaps. Recaps are sent by email through the SMTP server you configure, to the delivery addresses you configure. The server does not contact any Relego-operated service.

### CLI and web interface

These clients read highlight files from devices you connect and send them to the Relego server address you configure. Kobo databases are copied to a temporary file, opened read-only, and deleted afterwards; device files are never modified.

### Browser extension

The extension syncs highlights from your Amazon Kindle Notebook to your Relego server.

- It reads only the Kindle Notebook site for the Amazon region you select, using the Amazon session already signed in to your browser.
- Notebook pages are parsed in your browser. Only the parsed highlights, book titles, and authors are sent, and only to the Relego server address you enter.
- It never reads, stores, or exports your Amazon password or cookies.
- It requests access only to your Relego server and the selected Kindle Notebook site, and releases access to a previous region when you change it.
- It stores its settings locally in your browser. Disconnecting removes the saved server address and connection token; uninstalling removes all of its stored data.

### Install scripts and releases

The install scripts download Relego release files from GitHub. Those downloads are subject to [GitHub's Privacy Statement](https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement).

## Website

The relego.app website is static and has no accounts or forms. It uses:

- **Vercel Analytics**, which counts anonymous page views without cookies. See [Vercel's privacy policy](https://vercel.com/legal/privacy-policy).
- **Google Fonts**, which receives your IP address when your browser downloads the fonts. See [Google's privacy policy](https://policies.google.com/privacy).

## Third-party services you choose

Relego works with services you choose and configure. Their own privacy policies apply:

- **Amazon**, when you use Send-to-Kindle or Kindle Notebook sync.
- **Your email or SMTP provider**, which delivers recap emails.
- **GitHub**, when you download releases, open issues, or contribute.

## Retention and deletion

You control all data Relego stores. Delete individual highlights in Relego, or delete the server's data volume (`/data/relego.db`) to remove everything. Disconnect or uninstall the browser extension to remove its local data.

## Children

Relego is not directed at children and does not knowingly collect data from anyone.

## Changes

Changes to this policy are made in this file and are visible in its [commit history](https://github.com/Krusty93/relego/commits/main/PRIVACY.md). The date at the top shows the latest update.

## Contact

Ask privacy questions in [GitHub issues](https://github.com/Krusty93/relego/issues). Report security concerns privately as described in [SECURITY.md](./SECURITY.md).