FALLOW — PRIVACY

Last updated 28 August 2026

Fallow works with no account, and without one nothing you read leaves your
phone. No reading list, no highlights, no reading positions, no addresses.
That is the architecture rather than a setting.

An account is optional. It adds syncing between your own devices, and this
extension, which needs one to have somewhere to send an article to.

WE DO NOT TRACK YOU, ANYWHERE

No analytics. No crash reporting. No advertising, no attribution, no session
replay, no third-party SDK of any kind, in the app or in this extension. We do
not sell or share anything, because nothing is collected to sell. We have no
way of knowing how often you open Fallow, what you read, or how far you got.
That is a permanent commitment rather than a current state.

WHAT THIS EXTENSION DOES

• It reads the tab you opened it over — the address, the title, and the page's
  own preview image — and only while the popup is open. It runs nothing on any
  other page and nothing in the background.
• It sends that page to your account when you press the button. Not before,
  and never on its own.
• It stores your sign-in in your browser, on your computer.

It does not read page content, form fields, passwords, or your browsing
history, and has no access to any tab you have not opened it over.

WHAT AN ACCOUNT HOLDS

• Your email address, to send the six-digit sign-in code and to recognise you
  next time. There is no password, so there is none to leak.
• Your reading list and shelf: an article's address, title, source, reading
  time and how far through it you are; a book's identity and your place in it.
• Your highlights and bookmarks, including the passage itself.
• Article text and pictures, and books you brought yourself.
• A device kind — iPhone, Android, Firefox — and when each last synced, so you
  can end a session you do not recognise. Not a device name or serial.

We can read what is stored, and we do not. An earlier design sealed it so that
we could not; that was given up deliberately, because it made a second device
unable to read your own library without carrying a key between phones. So the
honest statement is that your reading sits on our server in a form we are able
to open, and the protection is that we hold as little as possible, never look,
and let you take it all back.

SAVING AN ARTICLE CONTACTS THE PUBLISHER

When you save an article, Fallow fetches that page once, at the moment you ask.
Opening it later contacts nobody, so reading is not reported to the publisher
or to us.

WHO ELSE IS INVOLVED

Three companies handle data on our behalf and no others: Cloudflare, which runs
the sync service and stores files; Neon, the database, in Oregon, United
States; and Resend, which sends the sign-in email and so handles your address.

DELETING YOUR ACCOUNT

Deleting removes the rows and the files, not a flag on them. Nothing is kept
for later and nothing is restorable afterwards, including by us. Your library
stays on your phone — deleting the account is leaving the ecosystem rather than
losing your books. Export is available at every tier and always will be.

Unused sign-in codes and expired sessions are removed automatically.

CHILDREN

Fallow is not directed at children and we do not knowingly collect anything
from anyone under 13.

CHANGES

If this changes materially we will say so, with a date. The commitments above —
no telemetry, no advertising, no selling anything, an app that works with no
account — are not the kind of thing we intend to revise.

CONTACT

hello@fallowreader.com