Privacy

Who we are

Read It Later is made by Mbit (Mikko Kohtala) in Finland, which is responsible for your data. Write to hello@read-it-later.app with any question about it.

What we keep

• Your account. Your email address and a hash of your password. The password itself is never stored.
• Your library. The links you save and what we fetch for them: title, description, image address, site name and reading time. For each item, whether it is unread, read, a favourite or in Trash, and when.
• Your settings, such as how long Trash keeps things.
• Save keys. The key for the bookmarklet, the save API and the command line, and one key per phone for its share sheet. We keep only a hash of each, plus a short hint so you can tell them apart.
• Connected agents. The name of each AI agent you connect, and when it was connected and last used. Its access tokens are stored only as hashes.
• X, if you connect it. Your X user ID, username, name and profile picture address, the tokens X issues so we can reach your bookmarks, and the bookmarked posts: their text, author and images. The tokens stay on our server and are never sent to any app.

How we use it

Only to run Read It Later for you:

• When you save a link, our server visits the page to read its title, description, image and length. The site sees a request from our server, not from you.
• With X connected, we read your bookmarks every 15 minutes and, if you choose, remove the ones you have read from X. We use X data only to show your bookmarks to you, as X's developer terms require. Disconnecting X in Settings deletes the tokens; bookmarks already imported stay in your library until you delete them.

We don't show ads, run analytics or track you, on this site or in the apps. Read It Later keeps nothing in your browser or on your device beyond what signs you in and your preferences, such as the theme. We don't sell your data or share it with anyone for their own use.

Who else handles it

• Convex runs our database and server, in the EU (Ireland).
• Vercel serves the web app and this site.
• X, only if you connect your account.
• Pictures on your cards load from the sites that host them, and the small site icons come from Google's favicon service. Those services see your IP address and which site the picture or icon is for.

How long we keep it

Your library is kept for as long as you have an account. Deleting an item moves it to Trash, which empties itself after the time you choose (30 days unless you change it). Emptied links are deleted for good. An emptied X bookmark leaves behind a hidden record of the post, so the next sync doesn't bring it back.

Deleting your account

Read It Later has no delete button for accounts yet. Email hello@read-it-later.app from the address you sign in with, and we will delete your account and everything in it, including those hidden records, within 30 days.

Your rights

Under the GDPR you can ask for a copy of your data, have it corrected or deleted, or object to how we use it. Email us and we'll answer within a month. You can also complain to the Finnish Data Protection Ombudsman at tietosuoja.fi.

Changes

If this page changes, the date at the top changes with it.