G2 RSS Reader privacy
G2 RSS Reader is published by oddrefresh. This page describes what version 0.5.0 actually does, read from its source code.
How it is built
The app runs inside the Even Realities app on your phone and draws on your G2 glasses over Bluetooth. It does not fetch feeds itself. Everything it shows comes from one server: a Cloudflare Worker run by oddrefresh. The app's manifest allows network access to that server and nowhere else.
Who you are to the server
On first launch the app makes a random ID and keeps it in the Even app's storage on your phone. That ID goes with every request and is the only thing that tells your data apart from anyone else's. There is no account, no name, no email and no password. Because there is no password, anyone who had your ID could read your feed list and read state, so the app never displays it.
What leaves your phone, and where it goes
To the oddrefresh Worker:
- Your random ID.
- The feed addresses you add or remove.
- Which articles you open or mark read, and any purge you ask for.
- Your summary settings: which provider, an optional model name, and your API key if you choose to use your own.
- Your latitude and longitude, only when the standby weather is on and your phone grants a location fix.
From the Worker to other services, on your behalf:
- Feed publishers. The Worker requests each feed and each article page. Publishers see a request from Cloudflare, not from your phone or your address.
- Open-Meteo, a free weather service. It receives the coordinates your phone sent and returns the temperature and conditions. Your ID is not sent.
- Cloudflare Workers AI, the free default summarizer. It receives the article title and up to the first 4,000 characters of its text.
- Anthropic or OpenAI, only if you saved your own key for one of them. That provider receives the same title and text, plus your key, and bills your account under its own terms. Your ID is not sent.
What is stored on the server
- Your feeds: address and title, tied to your ID.
- Articles from your feeds: title, link, date, a snippet of up to 200 characters, and, once someone opens it, up to 10,000 characters of extracted text and the summary.
- Read and purge records: which article IDs your ID has read or hidden, with the time.
- Summary settings: provider, model and, if you entered one, your API key. The key is stored as plain text in the database and is never sent back to the app. The app only learns whether one is saved.
These records have no expiry. Removing a feed deletes that subscription. A purge hides articles from you but does not delete them. There is no in-app way to delete your ID's records; ask using the contact below.
Short-lived caches on Cloudflare: extracted article text for 3 days, summaries for 7 days, and weather for 30 minutes. The weather cache is keyed by coordinates rounded to about a kilometre, not by your ID.
What is stored on your phone
In the Even app's storage for this app: your random ID, your preferences, the IDs of up to 500 articles you have read, the last feed list, your last location fix and your last weather reading. A weather reading older than six hours is no longer shown. All of it goes away if you remove the app.
Location
Location is used for one thing, the weather on the standby screen. You can turn weather off from the phone, or deny location access, and the rest of the app works the same.
Selling, tracking, training
The app and its server contain no analytics, advertising or tracking code. oddrefresh does not sell this data or use it to train models. What Cloudflare, Anthropic and OpenAI do with requests they receive is governed by their own policies.
Questions
Questions go to the Contact me button on this page.