Privacy Policy

Last updated: 22 June 2026

CrossPoint Context is a hosted service that lets an AI assistant read the book you're currently reading on your CrossPoint e-reader, so it can answer your questions about it. This policy explains exactly what it stores and how to delete it.

What we collect

• Reading content — the text of your current book up to your reading position, the book's title, and your reading progress (section and page). This is sent by your e-reader when it syncs.
• Account identifier — when you sign in with GitHub or Google we store a pseudonymous identifier (e.g. github:<id> or google:<sub>) mapped to an opaque account slot. This is all that is stored alongside your reading data.
• Sign-in handle (transient) — your GitHub username or Google email address is used only to show who you're signed in as during login and consent. It is kept solely in temporary login and authorization records that expire automatically; it is not stored with your reading data.

How it's used

Your reading data is used for one purpose: to answer your own questions about your reading, through the assistant you connect. It is never sold, shared, used for advertising, or used to train models.

Retention

Reading content auto-deletes after 90 days of inactivity; every sync resets the clock, so idle accounts are cleared automatically. Each account is capped at 5 MB of stored reading content.

Deleting your data

At any time, visit https://mcp.crosspoint-context.com/account and sign in to:

• Delete your reading data — removes the stored book text, title, and position.
• Revoke paired devices — invalidates the write credentials held by your e-readers, so they can no longer send data (re-pair to resume).

After deletion, a single pseudonymous identifier mapping your sign-in to your (now-empty) account slot may be retained so the account can be reused if you sign in again. It contains no reading content. Authorizations you've granted to an assistant expire automatically and can also be removed by disconnecting the service in that assistant.

Hosting & security

The service runs on Cloudflare Workers, with data stored in Cloudflare Workers KV. All traffic is served over HTTPS. Device write access uses per-device credentials that you can revoke.

Contact

For any data request or question, email privacy@crosspoint-context.com.

Changes

We may update this policy; material changes will be reflected in the "last updated" date above.

← Back to home