Endpaper
Privacy Policy · Last updated September 22, 2026
Endpaper is a personal ereader app. It has no account system, no analytics, no advertising, and no server operated by the developer. This page explains, in full, everything the app does that touches your data.
The short version
- No accounts. You never sign up for anything with Endpaper itself.
- No analytics or tracking. No usage tracking, no crash reporting, no advertising identifiers. Endpaper's App Store privacy manifest declares zero collected data types.
- No developer-run server. There is nothing for Endpaper's developer to store, breach, or sell — your library, reading progress, and highlights live in a local database on your device.
- Everything else is opt-in and goes straight from your device to a service you chose, using credentials you provided. Dropbox for your book files, and — only if you turn it on — a book-catalogue lookup or an AI reading-recommendation provider.
What's stored on your device
Endpaper keeps a local database (on-device only, never transmitted to the developer) containing:
- Your book library index — titles, authors, file size, and a content fingerprint used to recognize a book if you rename or move it
- Reading progress — your position in each book, stored as a full location reference so you can pick up where you left off even across editions
- Highlights and notes you create while reading
- Reading session history — start/end times and progress deltas, used to power the in-app stats screen (minutes read per day, streaks, and finishes)
- Catalogue metadata fetched for your books (descriptions, subjects, cover art) if you enable metadata lookup
This data is excluded from iCloud backup where it's re-derivable (downloaded book files), and included where it's irreplaceable (your progress, highlights, and library index) — subject to your device's own iCloud/Backup settings. None of it is visible to, or accessible by, the developer.
Dropbox
Endpaper reads your book library from a folder in your Dropbox. You sign in directly with Dropbox, in Dropbox's own login screen, using the OAuth 2.0 standard — Endpaper never sees or stores your Dropbox password.
| Access scope | Read-only — account_info.read, files.metadata.read, files.content.read. Endpaper cannot create, modify, or delete anything in your Dropbox. |
|---|---|
| Folder scope | Restricted to Endpaper's own Dropbox App Folder — the app cannot see the rest of your Dropbox account. |
| What's stored | A refresh token, kept in the iOS Keychain (not UserDefaults, not iCloud-synced). It's used to reconnect without asking you to log in every time. |
| What's sent | Only the API calls needed to list and download the EPUB files in your library folder. |
You can disconnect Dropbox at any time from Settings, which removes the stored token from your device.
Optional: book catalogue lookup
To fetch cover art, descriptions, and subject tags for books in your library, Endpaper can look them up against public book catalogues. The only information sent is the title, author, or ISBN already on the book file itself — never your reading history or personal information.
| Service | Purpose | Account needed? |
|---|---|---|
| Open Library | Primary catalogue lookup — descriptions, subjects, cover art | No — anonymous, no key |
| Google Books | Fallback lookup for titles Open Library doesn't have | Optional personal API key you provide, stored in Keychain |
Optional: AI reading recommendations
Endpaper can suggest what to read next from books already in your library. This feature is off by default and requires you to choose a provider and enter your own API key in Settings. When you use it, the titles/authors used to build the suggestion are sent directly from your device to the provider you chose — never through a server run by Endpaper's developer — and billed to your own account with that provider.
| Provider | What happens |
|---|---|
| Anthropic (Claude) | Request sent directly to Anthropic's API using your personal API key |
| OpenRouter | Request sent directly to OpenRouter using your personal API key and chosen model |
| Cloudflare Workers AI | Request sent directly to your own Cloudflare account using your account ID and API token |
Each provider's own privacy policy governs how they handle that request. Endpaper does not log, store, or see the responses beyond displaying them to you.
Credentials and API keys
Any API key you enter (Anthropic, OpenRouter, Cloudflare, Google Books) and your Dropbox refresh token are stored exclusively in the iOS Keychain, never in plain-text app storage, never synced to iCloud, and never transmitted anywhere except to the service the key belongs to.
What Endpaper does not do
- No accounts, sign-ups, or profiles with the developer
- No analytics, usage tracking, or crash reporting SDKs
- No advertising or ad identifiers
- No selling, renting, or sharing of your data — there's no server to share it from
- No location data collection
- Not directed at, or knowingly used to collect data from, children
Data deletion
Because everything lives on your device, deleting the app deletes your library index, reading progress, highlights, and stats along with it. Disconnecting Dropbox in Settings immediately removes the stored access token. There is nothing left behind on any server, because Endpaper's developer does not operate one.
Changes to this policy
If this policy changes, the "last updated" date at the top of this page will change with it. Since Endpaper has no way to contact you directly, please check back here if you have concerns.
Contact
Endpaper is an independent, personal project with no support inbox or company behind it. This page is the complete and current statement of its data practices.