Privacy Policy

Overboard is designed to keep reading activity on your device. We do not sell personal data, serve behaviorally targeted ads, or build cross-app advertising profiles. Some optional and security-critical features do send limited data to Overboard services or third-party providers:

• Service access and abuse prevention: an app-generated device or installation identifier, platform, app version, short-lived access token, IP-derived rate-limit data, and request metadata may be processed to operate and protect the proxy.
• Optional notifications: a push token, anonymous installation identifier, locale, app version, selected notification options, watched thread or reply references, and any filter-watcher criteria you choose to upload.
• Accounts and purchases: if you choose email sign-in, your account email and short-lived verification codes; if you choose a private passkey account, a random account identifier, passkey public key, and credential metadata (never the passkey private key). We also process account session credentials, store product and transaction identifiers, entitlement tier and status, and checkout status. Apple, Google, Stripe, and any manual-payment provider process payment information under their own policies; Overboard does not receive full card details.
• User-initiated support and safety reports: the text and contact information you submit, plus any screenshot, crash log, post or media reference, diagnostic context, or device identifier you explicitly include.

History, favorites, hidden items, drafts, filters, tags, collections, and settings are stored locally by default. Apple-device users can choose iCloud Sync, and Android users can choose Google Drive Sync, to copy selected data through their own cloud account. Desktop and web builds use local application or browser storage. Android excludes Overboard's private databases, files, credentials, notification identifiers, and media from automatic operating-system backup; user-created export files are saved only where the user chooses. Account session credentials use platform secure storage where available. Local data can be cleared through app settings or by removing the app.

Overboard does not use advertising trackers or third-party behavioral analytics. The website and web app may use local browser storage for settings and application data. Websites opened inside or outside Overboard are independent third parties and may use their own cookies or tracking technologies.

The app connects to the following services:

• Third-party community and archive APIs - for browsing and displaying content. Depending on routing settings, your IP address and request are visible either to those services directly or to Overboard's proxy.
• Overboard services - for proxy access, app configuration, content filtering, passwordless account sign-in, entitlement synchronization, optional notifications, feedback, and safety reports.
• Apple, Google, Firebase, and Stripe - for purchases, optional cloud sync, push delivery, application distribution, and checkout as applicable to your platform and choices.
• Cloudflare Turnstile - for abuse prevention on the manual-payment form. Cloudflare processes browser, device, and network signals, including your IP address, to determine whether a request is likely to come from a person, then provides Overboard with a short-lived verification token.

If you use website checkout, access can be attached either to a private passkey account or an email account. Stripe may collect billing contact information for payment processing and receipts even when your Overboard account has no email. If you use the manual payment form, we collect the account email, requested access level, selected payment method, optional payment reference or transaction hash, optional notes, and limited abuse-prevention data. This information is used to verify payment and attach access to your account. Manual-payment intake records expire within 180 days. Account and entitlement records remain while needed to provide access, restore purchases, handle refunds, and meet accounting or legal obligations.

Overboard uses encrypted network connections, scoped access tokens, platform secure storage where available, and encryption for stored push tokens. No transmission or storage system is completely secure, so absolute security cannot be guaranteed.

Local data remains until you clear it or remove the app. Cloud-synced data can be managed through the corresponding iCloud or Google Drive controls. Optional server-notification device and token records expire after at most 180 days without renewal and can be deleted sooner from the notification settings. Manual-payment KV intake records expire within 180 days; related account, purchase and entitlement records, security records, and user-initiated support or safety submissions are retained only as reasonably needed to provide the feature, prevent fraud or abuse, meet accounting or legal obligations, and resolve the request. Email-account users can request deletion from the associated email address. Private passkey users should contact support while signed in so ownership can be verified without an email address.

These Services do not address anyone under the age of 18. We do not knowingly collect personally identifiable information from minors.

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes.

If you have any questions or suggestions about our Privacy Policy, or need to report inappropriate content, please contact us. We are committed to responding to all reports within 24 hours.