PAGEVAULT

Privacy Policy.

Effective: September 9, 2026

The short version. PageVault stores saved articles, tags, and reading progress on your device only. There is no account and no cloud sync performed by us. We never read, transmit, or sell the content you save. Anonymous crash reports and aggregate usage analytics are enabled by default outside pro-privacy jurisdictions (see §5) and can be turned off in Settings → Privacy at any time. In the EU / EEA, UK, Switzerland, Brazil, South Korea, India, and China they stay off until you turn them on.

1. Who we are

PageVault is a local-first read-later application published by CodeEnsis Ltd. ("we", "our", "us"), Χριστόδουλου Σώζου 2, EIFFEL TOWER, Floor 3, Flat/Office 301, 1096 Λευκωσία, Κύπρος. This policy explains what the PageVault mobile application collects, what it does with that data, the legal bases under the EU General Data Protection Regulation ("GDPR"), and your rights.

2. What data PageVault stores - on your device

The following data lives in PageVault's local storage on your phone. It is not transmitted to CodeEnsis servers:

Articles you save (URL, title, author, body text, hero image, captured HTML).
Tags you create (name, color) and which articles they apply to.
Reading state (read/unread, scroll position, favorites, custom display settings).
App preferences (default font, theme, hide-images toggle, justify text toggle).
Backup files you choose to export - saved to a location you select.

If you uninstall PageVault, this data is removed with the app. Any backup files you exported remain wherever you saved them and are your responsibility.

3. What we do not collect

No CodeEnsis account or login is created or required.
No advertising identifiers. No third-party advertising SDKs.
No saved-article content (URLs, titles, body text) is transmitted to CodeEnsis or to any third party.
No browsing history, location, microphone, contacts, or camera access is required.
No analytics or crash reporting from users in pro-privacy jurisdictions without explicit opt-in (see §5). Elsewhere, only anonymous, aggregated telemetry that can be turned off at any time.

4. Network requests PageVault makes

To save a page, PageVault fetches the URL you provide directly from the publisher's server, the same way a browser would. The fetched content is parsed locally and stored on your device. CodeEnsis does not proxy, log, or see these requests.

When images embedded in saved pages are displayed, your device may request them from their original hosts (typically the publisher's CDN). If you enable "Hide hero images" in Settings → Reading, image requests are skipped entirely.

5. Analytics & crash reporting - defaults by region

PageVault includes Firebase Analytics and Firebase Crashlytics from Google. Whether they are on by default depends on the region of your device at first launch:

Off by default (opt-in required) in the EU 27, the EEA (Norway, Iceland, Liechtenstein), the United Kingdom, Switzerland, Brazil, South Korea, India, and China. Nothing is collected until you turn the toggle on in Settings → Privacy → Share anonymous usage.
On by default everywhere else. Anonymous, aggregated telemetry starts flowing at first launch. You may turn it off at any time in Settings → Privacy → Share anonymous usage; from that moment no further events or crashes are sent.

The region is determined from your operating system locale at first launch. It is written to a local preference and does not change if you travel. Your prior choice in Settings always overrides the default and is preserved across app updates.

When collection is on, only the following is transmitted to Google:

Firebase Analytics: anonymous app instance ID, app version, OS version, device model, country-level region (derived from IP, then discarded), screen names you visit inside the app, and aggregate events such as "page saved" or "backup exported" (no URLs, no titles, no article content).
Firebase Crashlytics: stack traces of uncaught exceptions, the device model, OS version, app version, and a Firebase Installations ID. It does not receive your saved articles, URLs, tags, or any reading data.

Data already received is retained by Google according to Firebase's data retention policy. We do not use these SDKs for advertising and do not permit Google to use this data for its own advertising.

Legal bases. In pro-privacy jurisdictions listed above, processing is based on your explicit consent (Art. 6(1)(a) GDPR / equivalent). Elsewhere, we rely on our legitimate interest in maintaining and improving PageVault (Art. 6(1)(f) GDPR-equivalent frameworks and applicable local law); anonymous aggregate telemetry with a clear in-app opt-out is standard practice in those jurisdictions. In both cases you may turn collection off at any time in Settings without affecting the legality of processing prior to that change.

6. Subscriptions and purchases

If a future version of PageVault offers an in-app purchase or subscription, the transaction is handled by Apple (App Store) or Google (Play Store). We do not see or store your payment information. Your subscription state is read locally from the platform's purchase API.

7. Permissions PageVault asks for

Internet - to fetch the page you ask to save and to load article images for display.
Storage / Files - only when you explicitly export a backup or import one you select.
Share intent (Android ACTION_SEND, iOS Share Extension) - so you can save a URL by sharing it from another app.

You can revoke any permission at any time in your device's system settings.

8. Content you save - your responsibility

PageVault is a tool. You decide which URLs to save. You are responsible for ensuring that you have the right to save and store the content you fetch under the laws of your jurisdiction and the terms of the source website. CodeEnsis does not host, review, moderate, or endorse the content you save. We disclaim any responsibility for the content of pages saved through PageVault.

9. Children

PageVault is a general-purpose reading tool. It is not directed at children under 13, and we do not knowingly collect data from children under 13.

10. Legal basis (GDPR) and your rights - including data deletion

Where the GDPR applies, the only personal data CodeEnsis itself processes in connection with PageVault is data you voluntarily send us (for example, a support email). The legal basis for processing such data is your consent (Art. 6(1)(a) GDPR) and our legitimate interest in responding to you (Art. 6(1)(f) GDPR).

Because we do not collect personal data on our servers, there is no CodeEnsis-side account to access, export, or delete. You can at any time:

Export all your articles and tags as a backup ZIP from Settings → Backup → Export backup.
Delete individual articles in the app, or uninstall PageVault to remove everything.
Email [email protected] to request access, rectification, erasure, restriction, portability, or to object to any processing of personal data we may hold about you.
Lodge a complaint with the data protection authority of your habitual residence.

11. Data retention

Data stored on your device is retained until you delete it or uninstall the app. Support emails are retained for as long as needed to address your inquiry, typically no longer than 24 months.

12. International transfers

CodeEnsis is established in Cyprus, EU. Support correspondence sent to us is processed within the EU. We do not transfer your personal data to non-adequate jurisdictions.

13. Changes to this policy

We may update this policy as PageVault evolves. Material changes will be reflected here with an updated "Effective" date above. Continuing to use PageVault after a change means you accept the updated policy.

14. Contact

Privacy questions or rights requests: [email protected]. General support: [email protected]. A human reads every message.