The policy page.

What the website collects

The website uses Google Analytics to measure page visits, Download CTA clicks, and successful email-list subscriptions. Google Analytics uses a pseudonymous client identifier, normally from its own cookie. For the server-side successful-signup event, the Worker reuses that identifier when it can and otherwise generates an opaque fallback. It runs in the most minimal configuration we could give it:

• No Google Signals. Cross-device tracking and demographic or interest reporting are turned off, both in the page’s analytics code and in the analytics property’s settings.
• No advertising features. Ad personalization signals are explicitly disabled. Nothing from this site feeds remarketing or ad targeting, and the analytics property is not linked to any advertising product.
• No User-ID, and no form contents in signup analytics. The server-side email_subscribed event never includes your submitted email address, a User-ID, or the contents of the form.
• Short retention. Per-visit analytics records expire after two months, the shortest period Google Analytics allows.
• Best effort only. The successful-signup event is sent server-side only after a subscription succeeds. Invalid or failed attempts send nothing, and an analytics outage never blocks the signup itself.

The email list

The site has one form: the list that gets an email when Cove leaves beta.

• One topic, low volume. Cove release news. Nothing else, and never anyone else’s news.
• Delivered with Resend. Your address is stored with Resend, the service that sends the email, and is used only to deliver this list. It is not sold or shared beyond that.
• Unsubscribe anytime. Every email includes an unsubscribe link that works immediately.
• Access and deletion. Email privacy@covereader.app to ask what we hold about you (your email address) or to have it deleted.

The Cove app

The app’s story is shorter, and it is the point of the product.

• No product analytics. The app ships none: no usage events, no analytics service inside the app. The website analytics above end at the website; nothing in the app reports to Google or anyone else.
• Optional crash reporting only. If the app crashes, it can send a report so we can fix the bug. Personal details are stripped out on your Mac before anything is sent; what remains is the technical description of the crash. One switch in Settings turns reporting off entirely.
• No account, no cloud service, no reading-profile server. Articles are fetched and extracted on your Mac, and what you read stays there. There is no Cove service in the middle learning what you read.
• Diagnostics stay local. The app’s logs record what happened, not what you read, and they stay on your Mac.

Contact and changes

Questions about anything on this page: privacy@covereader.app.

If what the site or the app collects ever changes, this page changes with it, and the date at the top moves.