Privacy & Reader Data
What this site stores,
and what stays yours.
This page describes the data used by sonamzangmo.com as of October 4, 2026. The site is designed to keep account credentials out of browser JavaScript and to keep reader data scoped to the signed-in account.
Reader accounts
Reader accounts use passwordless email sign-in. The account service uses your email address to create and authenticate your reader identity through Supabase Auth. This website does not keep a separate password database.
When you sign in, the site may store reading position, bookmarks, highlights, notes, account-scoped reader settings, book-access entitlements, and ratings associated with your authenticated user ID. Reader data is protected by user-scoped database access rules.
Data stored on this device
The reader keeps a local browser copy of reading state so chapters continue to work during temporary network or cloud-service failures. Signed-in reader data is stored in an account-specific browser namespace; guest data uses a separate namespace.
Signing out does not automatically erase the local browser copy. This prevents accidental loss of notes during a failed sync. Clearing browser site data removes local copies from that browser. Cloud copies are separate.
Security and authentication services
Cloudflare hosts website and Worker infrastructure and provides Turnstile abuse protection. Supabase provides authentication and user-scoped database storage. Resend is used to deliver one-time sign-in emails. Authentication tokens are held in Secure, HttpOnly, SameSite=Strict cookies and are not exposed to normal page JavaScript.
Analytics
Some public pages use Google Analytics 4 to measure coarse site activity such as page views and navigation between site sections. The site's custom analytics code does not intentionally send reader email addresses, note text, highlight text, or account IDs to Google Analytics.
Analytics configuration and consent controls may change as the site develops. This page will be updated when that behavior changes materially.
Book Finder
Book Finder sends the reading preferences you submit to the site's Book Finder Worker. The Worker may query Google Books, Open Library, Cloudflare Workers AI, and—when enabled—Brave Search. Book Finder requests are not combined with your reader-account email or private notes by the site.
Retention and deletion
Reader-account data is retained while the account remains active unless it is removed as part of an account-deletion request or an operational requirement. Purchase/access records may need to be retained separately where required to preserve transaction, refund, fraud-prevention, or legal records.
To request deletion of your reader account and associated cloud reader data, email [email protected] from the same email address used for the reader account and use the subject Reader account deletion request. The request will be verified before the Auth user is removed. Removing the Auth user causes user-linked profile, reader-state, rating, and entitlement rows to be removed by the account database relationships.
Browser-local copies are not remotely controllable by the site after account deletion. On devices you control, clear site data for sonamzangmo.com if you also want those local copies removed.
Contact
For privacy questions, account-data questions, or deletion requests, contact [email protected].
Last updated: October 4, 2026.