Privacy, in plain English.

Last updated 16 July 2026

The short version: no ads, no tracking pixels, no selling data, no third-party analytics. We keep the minimum needed to run a search engine well, and none of it builds a profile of you.

What we store

• Search queries. What was searched, with an anonymous random session ID (a string your browser makes up — not your name, email or a fingerprint). This is how we learn which searches fail and what the archive is missing. It is never joined to your identity.
• Usage events. Which works get opened, downloaded or credited — same anonymous session ID, same purpose: making the library better.
• Feedback. If you send feedback, we keep the message, and your email only if you chose to include one for a reply.
• Account data (only if you create one): your email and your saved boards and follows. Authentication is handled by Supabase; we never see your password. Delete your account and this goes with it.
• Server logs. Standard, short-lived request logs (IP addresses included) used for security and rate limiting — kept briefly, then gone.

Cookies

No advertising or analytics cookies — there is nothing to consent-banner you about. Signed-in visitors get one functional cookie (ark_at) that lets the download button work while you're logged in; it exists only for that job. Your theme preference and session ID live in your browser's local storage and never identify you.

Who else touches data

• Cloudflare serves and shields the site (CDN, security). Requests pass through it, as with most of the modern web.
• Supabase stores account data and our anonymous logs (EU-hosted Postgres).
• Google Fonts and jsDelivr serve the typefaces and one JavaScript library, which means your browser requests files from them. We plan to self-host these so that even that disappears.

Nobody gets your data from us — there's no advertising relationship, no data broker, no "partners".

Your rights

Under UK/EU data-protection law (GDPR) you can ask what we hold that relates to you, ask for it to be corrected, or ask for it to be deleted. For account holders, deleting your account removes your boards, follows and profile. For anything else, write to [email protected] and a person will sort it out.

Who is responsible

Arkivism is an independent project; the data controller is its operator, reachable at [email protected]. If we ever change what we collect, this page changes first, with a new date at the top.