What we store, and what we do not

The Boundless app #

Signed out, Boundless is entirely local. Your library, reading progress, history, downloads, and settings live on your device and are never transmitted anywhere. There is nothing required to read: no account, no sign-in, and no data sent to us.

Signing in is optional. Once you do, the app saves your library (which books, from which source), your reading progress (position per chapter, chapters finished), your reading history, your settings including privacy and parental controls, and any tracker connections you set up (AniList, Kitsu, MyAnimeList, MangaUpdates, Shikimori, or Bangumi), to your account, so they follow you to another device. How much time you spend reading is separate: a switch in the app's settings, on by default, controls whether that figure also syncs, which is what feeds the community leaderboard. A tracker connection pushes your progress to that tracker only if you connect one.

iCloud Sync is a different thing. It goes through your own iCloud account, on Apple's servers under your Apple ID, and never touches ours.

This exists so your data can follow you to another device and survive a lost one, not to build a profile of you. It is not used for advertising, and it is not sold or shared with anyone.

Servers you connect #

If you connect a media server you host, such as a Komga library, your device talks to that server directly. Boundless is not in the middle of that connection, does not proxy it, and keeps no record of it. If the server is one you run, its logs are yours.

This website #

If you only read

Browsing this site creates no account and sets no tracking cookie. Your theme, palette, and ambient effect choices are kept in your browser's own storage so they survive a reload, and they never leave your device. There is no advertising network, no embedded third-party content, and no fingerprinting. Standard web server logs (address, page requested, timestamp, user agent) are produced by the hosting infrastructure for operational and security purposes and are not used to build a profile of you.

Google Analytics can count page views on this site, but only if you allow it in the cookie notice. Nothing from Google loads until you say yes, your answer is kept in your browser under boundless-consent, and you can change it any time from Cookie settings in the footer.

If you create an account

This is one optional account, shared between this website and the app. Creating one is never required: the app works fully without it, and on this site it only gets you a public profile and the leaderboard. If you create one, we store what it needs to work:

• Your email address, used to confirm the account and to send password resets.
• Your username and display name, and an optional short bio if you write one.
• A cryptographic hash of your password. The password itself is never stored and cannot be recovered from the hash.
• Account timestamps, meaning when it was created and when it was last used to sign in.
• Your preference about release announcement emails.

Sign into the app with the same account, and it also holds your library, reading progress, history, settings, and any tracker connections, as described above. Your public profile at /u/<username> can show the totals from that (how many books are in your synced library, how many chapters have progress synced) and any books you put on your shelf yourself as a favourite or a liked pick. Nobody sees which books you are reading or where you have got to beyond those shelf picks you chose to make public. The community leaderboard ranks accounts by synced chapters read and reading time, if you appear on it.

Turning on "Keep my profile private" on your account page hides all of that: bio, badges, stats, banner, shelf, and your leaderboard position. Your name and handle still show.

A cookie is set from your first visit, before you sign in. At that point it holds only a CSRF token that protects this site's own forms. Once you sign in, the same cookie carries your session and keeps you signed in. It is not used for tracking.

Email

Account email (confirmation, password reset, and security notifications) is sent from a mailbox on this domain. Those messages are transactional and are not marketing. Release announcements are optional and can be turned off at any time from your account page.

What we never do #

• Sell, rent, or share your personal information or your reading data with anyone.
• Run advertising or behavioural profiling, with or without an account.
• Load third-party scripts, fonts, or embeds that could track you across sites, beyond the analytics you explicitly allow.
• Proxy or inspect what you read. Your device fetches it directly, always.
• Show anyone your reading positions or your library's contents beyond the shelf picks you choose to make public.

Your choices #

If you have an account, you can change your display name, bio, and email preferences from your account page at any time, and turn on "Keep my profile private" there whenever you want your profile and leaderboard position hidden. Delete the account from that same page and the deletion is immediate: it removes your record, any pending tokens, and the reading data synced to it. It cannot be undone. Your device library is not affected.

Signing out of the app on a device just stops that device syncing; nothing already saved to your account is removed until you delete the account itself.

For anything else, including a copy of what is held about you, write to wuji@boundless.moe.

Children #

Accounts are not intended for children under 13. The app itself needs no account and includes optional parental controls, described in the documentation.

Changes #

If this policy changes in a way that affects what is collected, the change will be noted on the blog as well as here, rather than quietly changing the date at the top.