Privacy

Your account

You sign in with Google or with an email and password, through Firebase Authentication. Inkwell keeps your email address, and your name and profile photo when Google provides them, so it can show who’s signed in. Your session is kept in a secure cookie.

Your library

Inkwell stores the books you add, and for each one the list it’s on, the formats you own, your read dates, and any cover, authors or page count you edit. Only you can see your library.

When you look up a book by ISBN or search for one, the ISBN or the words you typed are sent to Open Library and Google Books to find its details and cover. Nothing about you is sent with them.

The Kindle import extension

The Inkwell Kindle import extension for Chrome runs only when you click it, and only on the page you clicked it on. On Amazon’s “Manage Your Content and Devices” list, it reads each item’s title, authors, cover image address and Amazon identifier (ASIN). It sends them to your Inkwell address, using the API token you created in Inkwell’s settings, to add them to your library. Personal documents from the Docs tab are kept private to you.

The extension stores your Inkwell address and API token in Chrome’s local storage on your computer. It doesn’t read any other page, your browsing history, or your Amazon account details, and it sends nothing anywhere except your Inkwell address.

API tokens are stored by Inkwell only as a one-way hash, and you can revoke one at any time in Settings.

Where your data is kept

Inkwell runs on Vercel, and your data is stored in a Postgres database hosted by Supabase. Sign-in is handled by Google’s Firebase Authentication. Each of them processes data only to provide that service.

Deleting your data

You can delete any book from your library, and revoke API tokens, in the app at any time. To delete your whole account and everything in it, contact the developer through the extension’s Chrome Web Store listing.