Privacy

Effective date: July 31, 2026

Broadside Reader is an e-reader for iPhone and Apple TV. It has no accounts, shows no ads, does not track you, and never sells data. Your documents belong to you and stay in your own private Apple iCloud account.

What Broadside Reader does not do

• No user accounts. The app never asks who you are.
• No advertising and no advertising identifiers.
• No tracking across apps or websites.
• No selling or sharing of personal information with data brokers.
• No advertising or tracking SDKs. The only data leaving your devices is described below.

Your documents and reading data

The documents you add (PDFs, EPUBs, text files, scripts you write) and your reading data (positions, bookmarks, folders, settings) are stored:

• On your devices, in the app's private storage.
• In your personal iCloud account, using Apple's CloudKit private database and iCloud key-value storage, so your library and reading positions sync between your iPhone and Apple TV.

This data lives in your own private iCloud, under your Apple Account. We, the developer, have no access to it and cannot read it. We never receive a copy. Apple's handling of iCloud data is governed by Apple's own privacy policy.

Read aloud uses Apple's on-device speech synthesis. The text of your documents is never sent anywhere to be narrated.

Saving web pages

When you save a web page, the article's text is stored like any other document: on your devices and in your own private iCloud. It is not sent to us.

Saving happens two ways:

• Saving from Safari captures the page your browser has already loaded, on your device. Nothing is fetched again, and nothing about the page is sent to us.
• Saving a bare link, from Messages or Mail for example, means the app fetches that address itself, so the site sees a request from your device as any browser would. If the page names a preview image, the app downloads that image from wherever it is hosted to use as the article's cover.

We do not receive the addresses you save, or any record of what you read.

Analytics

Broadside Reader sends anonymous usage events to TelemetryDeck GmbH, which processes them on servers in Germany, so we can see which features people actually use and decide what to improve. An event records that a feature was used, and how it was configured: the typoscope turned on, text size raised, read-aloud started.

What these events never include:

• The title, content, or address of anything you read.
• Any personal identifier, name, email address or advertising identifier.
• Your location, contacts, photos, or anything else on your device.

The events are a fixed list, so there is no field in which a document title or address could travel even by accident.

Events are counted against a random installation identifier, not linked to you or your Apple Account, and used only in aggregate. This measures the app, not you. It is not tracking as the App Store defines it: nothing is shared with data brokers or used for advertising, and nothing is combined with data from other apps or websites.

Crash and performance diagnostics

So crashes get found and fixed, Broadside Reader uses Sentry (Functional Software, Inc.), which receives that data on its European Union servers. When the app crashes, misbehaves, or runs slowly, it sends:

• Crash reports and error details (stack traces, device model, OS version, app version).
• Performance measurements (launch time, slow operations).
• On iPhone, session replays of a fraction of sessions: a schematic recording of taps, scrolls and navigation in which all text and all images are masked on the device before anything is sent. A replay can never show a word of what you were reading.

Diagnostics are configured to exclude personal information. Your IP address is not stored with events. The only identifier attached is a one-way cryptographic hash of your iCloud user record id, which lets us see that two crash reports came from the same installation without any way to learn who you are. Diagnostic data is retained on Sentry's servers for Sentry's standard retention period (about 90 days) and then deleted.

Purchases

Whatever purchases are on offer, they are processed entirely by Apple through the App Store. We never see your payment details. Purchase entitlements are checked on-device through Apple's StoreKit.

Feedback

If you choose to send feedback, the app opens your own email client with a draft addressed to us. Nothing is sent unless you send it, and we receive only what you write, plus the app version and device model prefilled in the draft. We use your email only to respond to you.

Children

Broadside Reader is a general-audience e-reader. It does not knowingly collect personal information from anyone, including children.

Your choices

• Deleting a document in Broadside Reader removes it from your devices and from your iCloud.
• Deleting the app removes its local data; iCloud data remains in your iCloud until you delete the documents in the app or manage the app's iCloud data in your device settings.
• To request deletion of diagnostic data, contact us at the address below and include the approximate date and device; we will remove matching reports.

Changes to this policy

If this policy changes, the updated version will be posted at this address with a new effective date. Material changes will be noted in the app's release notes.

Contact

Questions or requests: hello@lodestar.cv