Privacy &
classroom use

Guest mode creates no epuble account and does not ask for an email or alias. Highlights, annotations, bookmarks and reading progress made as a guest remain only in the current browser tab. Closing the tab ends that guest session and clears its reading activity.

The exception is an online dictionary lookup: the selected word is sent through epuble to Free Dictionary API. If that service has no result, epuble may ask Wiktionary. The EPUB reader library itself is included with epuble and is not fetched from a third-party software CDN.

Presentation tip: use Guest mode for a peer demonstration. It avoids collecting participant details and keeps the focus on the reading activity.

If you choose to sign in, epuble uses your account data to authenticate you, display your shelf, open your books and restore your reading work across sessions.

Identity and sign-in

• Your email address.
• An optional alias that you enter yourself. It does not need to be your legal name.
• A temporary six-digit email code when email sign-in is used. It expires after 10 minutes.
• A random session identifier after sign-in. A normal session lasts up to 30 days unless you sign out or delete the account sooner.
• If you choose Google sign-in, Google supplies a verified email address and a sign-in identifier so epuble can recognise the account.

This version of epuble does not ask for or store a date of birth or gender.

Books and reading activity

• EPUB files you upload, together with book details such as title and author.
• Annotations and highlights, including any private note text you write.
• Bookmarks, reading progress and reading history.
• Saved reader state needed to reopen a book where you left it.

These items are associated with your account and are not shown to peers through the ordinary reader. “Private” does not mean end-to-end encrypted: the person or organisation administering this epuble deployment can technically administer its Cloudflare storage. Do not enter sensitive personal, health or wellbeing information in reading notes.

Signed-in account data, uploaded EPUBs and saved reading activity remain in epuble’s active storage until you delete the relevant content or delete the account. Temporary sign-in codes expire after 10 minutes, and ordinary sessions expire after 30 days.

Account deletion removes the account, uploaded books and saved reading activity from epuble’s active application storage and signs the browser out. Infrastructure security logs or backups controlled by a service provider may follow that provider’s own limited retention schedule.

Signing out alone does not delete saved books or reading activity. Guest-mode activity needs no deletion request because it is cleared when its tab closes.

epuble relies on the following services to provide specific features. When a service is used, it may also receive ordinary connection information such as an IP address and browser details under its own terms and privacy practices.

Cloudflare

Hosts epuble and provides D1 database storage, R2 file storage and KV storage for temporary codes and sessions. Privacy policy

Resend

Delivers one-time sign-in emails, so it processes the destination email address and email delivery content and metadata. Privacy policy

Google

Used only when you choose “Continue with Google”; epuble requests basic sign-in identity information. Privacy policy

Dictionary sources

A word you look up may be sent to Free Dictionary API, with Wiktionary / Wikimedia used as a fallback.

Upload only EPUB files that you own or have permission to use. Suitable examples include your own writing, a work that is public domain where you are using it, or an EPUB covered by a licence or school agreement that permits this use. Buying or borrowing an ebook does not automatically grant permission to copy its file into another service.

epuble’s built-in titles use public-domain texts in editions from Standard Ebooks. Standard Ebooks dedicates production work created by or for it to the public domain through CC0; it also notes that material it did not produce may still be subject to copyright. Copyright and public-domain status can differ between countries, so educators should check the rules that apply in their location.

For class use: do not upload a commercial class text simply because students can access it elsewhere. Use an authorised school copy, a permitted excerpt, or a public-domain / openly licensed alternative.

Before asking students to create accounts or upload work, the teacher and school should decide whether epuble is appropriate for their setting and apply their own requirements. In particular, check:

• the school’s privacy and data-handling policy;
• student and parent or guardian notice and consent, where required;
• acceptable-use expectations and account supervision;
• child-safety, wellbeing and reporting procedures;
• copyright permissions for every uploaded text; and
• who administers the deployment and who is authorised to access stored data.

For a short demonstration, Guest mode is the lower-data option. Use a public-domain built-in title and fictional or non-sensitive sample annotations.

This notice describes how this version of epuble is designed to work. It is not legal advice, a claim of compliance, or a substitute for local school policy and professional judgement.