Privacy Policy
Last updated: 1 Sept 2026
ReadForFree respects your privacy. This notice explains what personal data we collect, why, and how you can exercise your rights under the Malaysian Personal Data Protection Act 2010 (PDPA).
1. What we collect
Account data: email address, display name and a hashed password.
Reading data: which articles and pages you open, your reading progress, bookmarks, likes, comments and follows.
Technical data: IP address, browser type (hashed), approximate country, a device identifier cookie, and ad-reward events used to unlock pages.
Author data (authors only): pen name, bio, avatar, payout method and account details, and identification number. Payout account and ID numbers are encrypted at rest.
2. Why we use it
To operate the service: log you in, remember your reading position, show you your shelf.
To run the ad-unlock model fairly: detect duplicate or fraudulent ad rewards and calculate author revenue share.
To pay authors and comply with tax and anti-money-laundering obligations.
To keep the platform safe: moderation, copyright complaints and abuse prevention.
3. Cookies
We use strictly necessary cookies only: a session cookie (login), a device-id cookie (guest unlocks and progress) and a language preference cookie. Third-party advertising providers may set their own cookies subject to their policies.
4. Sharing
We do not sell personal data. We share data only with service providers needed to run the platform (hosting, advertising network, translation and payment providers) and where required by Malaysian law or a competent authority.
5. Retention
Account data is kept while your account is active. Read logs and ad events are kept for up to 24 months for settlement and audit, then deleted or anonymised. Author payout records are kept for 7 years as required for financial records.
6. Your rights
Under the PDPA you may request access to or correction of your personal data, withdraw consent for non-essential processing, and ask us to delete your account. Contact us via the report page or the email in the footer; we respond within 21 days.
7. Children
The service is not directed at children under 13. If you believe a child has created an account, contact us and we will remove it.
8. Changes
We may update this notice. Material changes will be announced on the Announcements page.