Privacy policy
Last updated: 25 October 2026
Laterleaf is a browser extension for Chrome, Edge and Firefox, with a companion web app for phones. It keeps your saved articles on your own devices. There are no accounts, no analytics and no ads, and your articles, highlights and browsing never reach us. The only thing we run is a small server for the optional paid plan, Laterleaf Pro; what it knows is described below.
What Laterleaf keeps, and where
Everything stays in your browser's storage on your device:
- the articles you save: their text, images, address, title and the date you saved them;
- your highlights, notes, tags, favorites and reading progress;
- your settings, such as the reader's theme and text size;
- if you connect sync: the name or email address of the cloud account, and what is needed to reach it (sign-in tokens, or a WebDAV app password).
You can delete any article, or everything, at any time. Removing the extension, or clearing the web app's site data, deletes the library from that device.
When data leaves your device
Only in these cases, each started by you:
- Saving. When you save a page, Laterleaf reads it from the tab you are looking at. It may then download that page's images, or the pages of links you import, directly from the websites they come from, just as your browser does when you open them.
- Sync, if you turn it on. Your library is copied to the cloud storage you choose: your own Google Drive (a hidden folder only Laterleaf can see), your Dropbox (the "Laterleaf" app folder) or your own WebDAV server. It goes directly from your browser to that service; we never see it. That service's own privacy policy applies to what you store there. You can encrypt the cloud copy with a password (AES-GCM; the password never leaves your devices), and then the cloud service cannot read it either. Disconnecting stops sync, and you can delete the cloud copy from Laterleaf's settings.
- Listening. Articles are read aloud by your browser's speech voices. Laterleaf picks a voice installed on your device. If you choose a voice your browser provides online (some voices in Chrome and Edge), the browser sends the text to its maker's speech service.
- Natural voices (Pro), when you download one. Laterleaf shows the size first; when you agree, it downloads the voice (the model of a voice from the open Piper project) from Hugging Face (huggingface.co) and its pronunciation dictionary from our site (app.laterleaf.app). These servers see an ordinary file request from your browser, nothing about your library. After that the voice runs on your device: what it reads never leaves it. You can remove a voice in Laterleaf's settings.
- Export. When you export your library, the file is saved where you choose.
- Laterleaf Pro, if you try or buy it. See the next section.
Laterleaf Pro
Pro is optional. It belongs to your library, not to an account: your library has a random number, made in your browser, that does not say who you are. Our Pro server (it runs on Cloudflare) keeps only:
- that number, the plan and until when it is paid, or when your free trial ends. With Pro or a trial, Laterleaf sends the number once a day and gets back a signed pass that it checks on your device;
- if you buy Pro: the payment service's reference for your purchase, and a keyed hash of the email address you paid with (a fingerprint from which the address cannot be read back), never the address itself;
- if you restore a purchase on a new library: you type the email address you paid with, and the server uses it once to email you a 6-digit code through the email service Resend. It is kept only as the same hash; the code is kept, hashed, for 10 minutes.
Payment happens on the checkout of Paddle.com, which sells Pro for us as the merchant of record and handles your card, tax and receipts under its own privacy policy. We never see your card. Logging is off on our server: it keeps no record of requests. Your articles, highlights and the pages you visit never reach it.
What we do not do
- We do not sell, share or analyze your data. There are no analytics, trackers, cookies or ads.
- Laterleaf does not read pages you do not ask it to save, and does not record your browsing.
- It does not load code from the internet: everything it runs is in the reviewed package.
Permissions
Access to all websites is optional and is asked for only when you want images from other sites kept for offline reading, or imported links downloaded. For a WebDAV server, Laterleaf asks for access to that one server. Each permission is explained on the store page.
Children
Laterleaf collects no personal information from anyone, including children. Buying Pro is for adults; the only personal detail involved, the payer's email address, is kept only as a hash.
Changes
If this policy changes, the new version is published on this page with a new date. Laterleaf will not start collecting data without asking you first.
Contact
Questions about privacy or anything else: [email protected].