Privacy
Your research, your workspace.
Public use
Browsing papers, searches, and public notebooks requires no account. Cloudflare processes request metadata needed to deliver and protect the service.
AI literature search
Questions, recent conversation context and retrieved public paper excerpts are sent to Cloudflare Workers AI to generate cited answers and follow-up questions. In your signed-in workspace, conversation titles, questions, completed answers and their references are saved privately to your account in Cloudflare D1 so you can reopen them across devices. You can rename or delete conversations from Ask AI; deleting your account also deletes this history. Incomplete drafts and questions whose answer generation fails are not saved as completed answers. History is not included in public profiles or collections. Operational logs record run identifiers, timings and usage rather than question text. Cloudflare processes request metadata for per-IP rate limiting.
Social sign-in
Google and GitHub sign-in uses your provider account ID and display name. We do not request repository access or store provider access tokens, email addresses, or provider profile images. Different providers create separate accounts; they are not automatically linked.
Your private workspace
We store your saved paper IDs, reading statuses, private reading and execution notes, collections, saved search conditions, and profile settings in Cloudflare D1. These records are available only to your signed-in account. Do not store credentials or sensitive third-party information in notes. You can remove saved papers and notes, delete collections or watches, export your library, and delete your account from Profile.
What you choose to publish
Profiles and collections start private. Publishing a profile exposes your display name, handle, introduction, and public collections. Publishing a collection exposes its title, description, selected papers, and your display name even when your profile is private. Reading statuses, notes, execution results, and saved searches are never included in public collections.
Session cookies
Essential HttpOnly, Secure cookies maintain your sign-in and protect the OAuth flow. Sessions expire after 30 days; sign-out revokes the current session. Temporary login states expire after 10 minutes. Session tokens are stored only as hashes. We do not use advertising trackers.
Submissions
Tool submissions store the public information you provide. Temporary rate limits help prevent abuse.
Last updated: 2026-10-24.