Your privacy

This website (favabeans.app)

The site is a set of static pages. It sets no cookies and has no ads. To know which apps people find useful, it counts visits and a few actions anonymously, as explained here.

• Hosting: the site is served by Cloudflare. Like any web host, Cloudflare processes basic technical data, such as your IP address and browser type, to deliver the pages and protect the site from attacks. Favabeans does not use this data to identify or track you.
• Anonymous visit counts (our own): each time an app or page opens, the site adds 1 to that day’s count for that app, and when you leave it adds 1 to a rough “time in use” group (under 1 minute, 1–5, 5–15 or over 15 minutes). Nothing else is sent: no IP address is stored, no cookie or ID is used, and the counts can’t be linked to you or to each other.
• Anonymous action counts (our own): in the same way, the site counts a few actions, like “watched a demo”, “tried the walkthrough” or “opened an app from a collection”, and that a page had an error (without the error’s text). Each one only adds 1 to that day’s total for that app. No cookie, no ID and nothing you type is sent, and the totals can’t be linked to you.
• Cloudflare Web Analytics: the pages include Cloudflare’s privacy-first analytics, which shows us totals such as page views, countries and which websites sent visitors. Cloudflare says it uses no cookies, no fingerprinting and doesn’t track individuals. About Cloudflare Web Analytics
• Fonts: the pages load their fonts from Google Fonts, so Google can see your IP address when the fonts load.
• Language suggestion: if your browser lists Arabic among its languages, the English pages may ask Cloudflare which country your connection comes from, only to decide whether to suggest the Arabic version. The country is used once in your browser and is not stored or logged. If you choose a language, that choice is saved only in your own browser.

ReadThis Reader and ReadThis Studio (web apps)

Both apps run entirely in your browser.

• Your documents (PDF, Word, EPUB, text) are opened and read inside your browser. They are never uploaded to Favabeans or anyone else.
• Saved on your device: your settings and reading positions (browser storage), and a copy of the app so it works offline (browser cache). Clearing this site’s data in your browser removes them.
• Natural voices: the first time you use one, the voice model is downloaded from Hugging Face (huggingface.co); the Reader also downloads the speech engine’s runtime from jsDelivr (cdn.jsdelivr.net). These are plain file downloads with none of your text in them; like any download, those services can see your IP address. After that, the voice runs on your device.
• File readers (Studio): the free libraries that open PDF, EPUB and Word files and save MP3s are served from favabeans.app itself, so no other service is contacted. Your file stays in your browser.
• Computer voices: for other languages the apps use the voices built into your browser and system. Most run on your device, but some voices supplied by Chrome (for example those named “Google …”) are online voices: Chrome itself sends the sentence being spoken to Google’s speech service.
• Reading a web page by link (Reader): if you use the URL button, the address you enter is sent to allorigins.win, a free public service that fetches the page for the Reader. Only the address you typed is sent. If you prefer, copy the text and use Paste instead.
• Voice server (Reader, optional): if you choose the “Toucan” engine, text is sent to the voice server address you enter. By default that is your own computer (localhost).

Float Timer and Tiny Steps (web apps)

• Saved only in your browser: your timers, task lists and a private list of things you finished are saved only in this browser’s storage. There’s no account, and none of it is sent to Favabeans.
• Spoken reminders (Float Timer, optional): these use your browser’s voices. As above, Chrome’s online “Google …” voices send the spoken sentence to Google.
• Smart steps (Tiny Steps, on by default): when you press “Break it down” or “Smaller”, the task text you typed, the number of steps you chose and, for “Smaller”, that one step are sent to favabeans.app, which passes them to Cloudflare Workers AI to write the steps. Favabeans doesn’t store or log them, and neither the task nor your IP address is saved. Cloudflare processes the request to answer it, under its own privacy policy. To keep everything on your device, press “Use offline steps instead” under the task box; Tiny Steps then uses its built-in steps and sends nothing. It also uses the built-in steps automatically when you’re offline.

Bean Jar (web app)

• Everything stays in your browser: the good things you add are saved only in this browser’s storage. Nothing is sent to Favabeans or anyone else.
• Things you finished in Float Timer, Tiny Steps and Clock Plan are read from this same browser and added to your jar. You can hide them.
• Passcode (optional): if you set one, your jar is encrypted in your browser with that passcode. It can’t be recovered if you forget it, so keep a backup.
• Backups you save are files on your own device.
• Beans from friends: a bean you send or receive travels inside the link itself (the part after “#”, which browsers never send to any server). Favabeans never sees or stores it; it’s only saved if the person who opens the link chooses “Add to my jar”.

Clock Plan, Did I? and Talk Card (web apps)

• Everything stays in your browser: your plan, your taps and times, and your cards are saved only in this browser’s storage. There’s no account and nothing is sent to Favabeans or anyone else.
• Clock Plan: tasks you mark done are added to the same private list that Bean Jar reads, in this browser only.
• Did I?: it only remembers what you tap. Backups you save are files on your own device.
• Talk Card voices: by default it speaks with your browser’s voices (as above, Chrome’s online “Google …” voices send the spoken sentence to Google). The natural English voice is optional: the first time you choose it, the voice model (about 92 MB) is downloaded once from Hugging Face, with none of your words in the download. After that it runs on your device, and it is shared with ReadThis Studio so it isn’t downloaded twice.

How Long Really (web app)

• Everything stays in your browser: your tasks and the times you measure are saved only in this browser’s storage. There’s no account and nothing is sent to Favabeans or anyone else.
• Sending a task to Clock Plan: the task name and your usual length are passed to Clock Plan inside this same browser.

Easy Eats (web app)

• Everything stays in your browser: your foods and shopping list are saved only in this browser’s storage. There’s no account and nothing is sent to Favabeans or anyone else.
• No diet or health advice: Easy Eats only shows the foods you add yourself. It doesn’t count calories or judge what you eat.

Joy Menu (web app)

• Everything stays in your browser: your menu is saved only in this browser’s storage. There’s no account and nothing is sent to Favabeans or anyone else.
• Pictures and printing: saving your menu as a picture or printing it happens on your own device.

People Notes (web app)

• Everything stays in your browser: the notes you keep about other people, their birthdays and things to ask about are saved only in this browser’s storage. There’s no account, no AI, and nothing is sent to Favabeans or anyone else.
• Passcode (optional): if you set one, your notes are encrypted in your browser with that passcode. It can’t be recovered if you forget it.
• Calendar export: “Add to my calendar” makes a calendar file (.ics) on your device with names and dates only, never your notes. People Notes sends nothing.

ReadThis Shorts (web app)

• Your texts stay on your device: text you paste or open (.txt, .md, .epub, .pdf) is split into cards inside your browser and saved only in this browser’s storage, with your saved cards, reading positions and settings. Nothing is uploaded to Favabeans or anyone else, and there is no tracking of what you read. The private “read today” note never leaves your device.
• The reading packs are part of the app: the fables, poems, facts and stories are bundled files served from favabeans.app, so no other site is contacted. The free libraries that open .epub and .pdf files are served from favabeans.app too.
• Daily cards: the “Today” cards come from favabeans.app, which collects them each day from Wikipedia’s public daily feed. Your device only asks favabeans.app; nothing about you is sent, and Wikipedia never sees your device.
• Voices: it reads with the best voice your device has (as above, Chrome’s online “Google …” voices send the spoken sentence to Google). On computers that can run it well, the natural English voice is used: its voice model (about 92 MB, or about 326 MB on computers with a fast graphics card) is downloaded once from Hugging Face with none of your text in it. On phones and tablets a smaller natural English voice (about 45 MB) is downloaded once from favabeans.app itself, with none of your text in it. Either way the voice then runs on your device. You can switch to the device voice in Settings.
• Sharing: the Share button only opens your device’s share sheet or copies the card to your clipboard. Nothing is sent unless you choose to share it.

Calm games: Fidget Board, Tidy Up, Pattern Garden and Marble Run

The games run entirely in your browser. Your progress, settings and saved builds, including sticker books and the room you decorate, are kept only in this browser’s storage; nothing is sent to Favabeans or anyone else, and there are no accounts, ads or tracking. Pictures you save are made on your device, and a Marble Run share link carries only the build or tune inside the link itself.

Hue Flow (web game)

• Progress stays on your device: your levels, palettes and settings are saved only in this browser’s storage. There’s no account and nothing is sent to Favabeans or anyone else.
• Sharing a level: a shared level link contains only the level code, nothing about you or your progress.
• Wallpapers: palettes you save as wallpapers are made on your own device.

Little Town (web game)

• Your towns stay on your device: the towns you build are saved only in this browser’s storage. There’s no account and nothing is sent to Favabeans or anyone else.
• Sharing a town: a share link holds the town layout inside the link itself, so nothing goes to a server.
• Postcards: postcard pictures are made on your own device.

ReadThis (Chrome extension)

ReadThis reads web pages aloud. It collects no personal data and never sends page text to any server. Its only network request is the optional one-time download of the natural voice model from Hugging Face.

Read the full ReadThis privacy policy

FloatViewPro (Chrome extension)

FloatViewPro floats videos in a picture-in-picture window. It collects no personal data. If you turn on subtitle translation and Chrome’s built-in translator isn’t available, the subtitle lines being translated (and nothing else) are sent to Google Translate.

Read the full FloatViewPro privacy policy

Muffle (Chrome extension)

Muffle makes busy web pages calmer. It collects no data and makes no network requests; your per-site choices are saved in Chrome’s storage on your device.

Read the full Muffle privacy policy

Device sync (optional)

Sync keeps your apps the same on your phone and computers. It is off unless you turn it on at Sync my devices, and while it is off nothing is sent.

• Your sync key stays with you: it is made on your device and kept in your browser and in your sync link or QR code (after the “#”, which browsers never send to a server). It is never sent to Favabeans, so we can’t read your data. If you lose all your devices and the key, we can’t recover it.
• What is stored: encrypted copies of your app data and settings (encrypted on your device with AES-256 before upload), each with its size and when it changed, under a random-looking id. Even the names of the apps are disguised. We also keep a scrambled check value (a hash) so that only your devices can change or erase the copy.
• What isn’t stored: the key, anything readable, your IP address, or any account or identifier. Cloudflare briefly counts requests from one connection to stop floods; that count isn’t stored.
• Locked apps stay locked: if People Notes or Bean Jar has a passcode, its already-encrypted data is synced as it is and still needs the passcode.
• How long it is kept: until you choose “Stop and erase from server”, which deletes the encrypted copy at once (a small marker without any data stays, so your other devices know to stop). Sync keys that no device uses for 180 days are deleted automatically.
• One-time transfers: “Send to another device” stores one encrypted bundle, locked with a key that is only in the link. It is deleted as soon as it is opened once, or after 10 minutes.
• On your devices: when an update from another device replaces or is combined with something, the earlier version is kept in that browser (the last 3 of each) so you can restore it. To combine changes from two devices, the browser also keeps the last version they had in common. This never leaves the device.

Feedback (optional)

Each web app has a small “How is it working for you?” box. Nothing is sent unless you press Send.

• What is saved: the app’s name, your stars, what you write, the page language, and the date. Your IP address and other identifiers are not saved.
• Where: in a private Cloudflare D1 database that only Favabeans can read. It is never shown on the site or shared or sold, and it is only used to improve the apps and to reply if you asked for a reply.
• Spam protection: Cloudflare briefly checks how many messages come from one connection so bots can’t flood the box; that check isn’t stored.
• Deleting: email hello [at] favabeans.app with roughly what you wrote and when, and it will be deleted.

Children

The apps don’t collect information from anyone, including children, apart from feedback that someone chooses to send.

Changes

If this page changes, the date at the top will change too.

Contact

Questions about privacy or anything else: hello [at] favabeans.app