Privacy Policy

Last updated: 3 August 2026

Who this policy covers

This policy applies to the SideShelf mobile app for iOS and Android, and to this website. SideShelf is an open-source client for Audiobookshelf, a self-hosted audiobook server that you run yourself. In this document, "we" refers to the maintainers of SideShelf.

SideShelf is not affiliated with the Audiobookshelf project. This policy does not cover the Audiobookshelf server software, nor whoever operates the server you connect to.

What SideShelf stores on your device

All of the following stays on your device. The app does not transmit it to a SideShelf app backend, because no such backend exists.

• Server connection details — the address of your Audiobookshelf server, your username, and the access and refresh tokens issued by that server. These are held in the iOS Keychain or the Android Keystore, the operating system's dedicated encrypted credential storage.
• Cached library information — titles, authors, series, cover art, chapters, and similar metadata retrieved from your server, kept in a local database so the app is fast and works offline.
• Downloaded audiobooks — audio files you choose to download, stored in the app's private storage area, which other apps cannot read.
• App preferences — settings such as skip intervals, smart rewind, sleep timer behaviour, home screen layout, tab order, and view mode.
• Diagnostic logs — only if you turn on diagnostics yourself. These logs are written to your device and stay there. They are shared only if you explicitly export or copy them, for example to attach to a bug report.

What SideShelf sends to your Audiobookshelf server

To do its job, the app communicates with the server address you enter. That traffic includes:

• Your credentials, in order to sign in and to refresh your session
• Requests for your libraries, books, cover art, and audio files
• Your listening position and playback progress, so it syncs across your devices

This connection is direct: it goes from your device to your server, with no SideShelf app backend in between. How that data is then stored, logged, or retained is determined by the server, which in the typical self-hosted case means it is determined by you. If you connect to a server run by somebody else, their practices apply and you should ask them about it.

Website hosting, third-party services, and app updates

This website is hosted using Cloudflare. When you visit it, Cloudflare necessarily processes request metadata such as your IP address, user agent, requested URL, and timestamps to deliver and secure the site. Cloudflare may process or retain this metadata under its configuration and policies. This website-hosting metadata is separate from the SideShelf app's library and listening data.

The SideShelf app includes no analytics, advertising, attribution, or tracking software. App stores and current app-update behaviour are also worth naming:

• Over-the-air app updates. OTA updates are disabled in current releases. The app does not automatically check for or contact an OTA service. If that changes, we will update this policy before a release enables it.
• App stores. If you installed SideShelf from the Apple App Store or Google Play, those companies collect their own installation, usage, and crash statistics under their own privacy policies. We may see aggregate, anonymised figures — such as a total download count or an unattributed crash report — through their developer dashboards. We cannot identify you from these.

What the app does not send to a SideShelf service

We want to be specific rather than vague here. The SideShelf app does not send the following to a SideShelf app backend, account, or analytics service, because none exists:

• Your name, email address, or any contact information
• Your Audiobookshelf server address, username, or password
• Your library contents, listening history, or playback progress
• Your location, contacts, photos, or device identifiers used for advertising
• Any behavioural or usage profile

There is no SideShelf app account or backend service to hold this data. The website-hosting metadata described above is separate from the app and your Audiobookshelf library data.

Deleting your data

Signing out of the app clears your stored tokens and username. Uninstalling SideShelf removes everything else it has stored — cached metadata, downloads, preferences, and any diagnostic logs. The app does not send this data to a SideShelf account or backend, so there is no app-data deletion request to send us.

Data on your Audiobookshelf server is unaffected by uninstalling the app, and is yours to manage through that server.

Security

Credentials are stored using the operating system's encrypted credential storage rather than in ordinary app files. We strongly recommend serving your Audiobookshelf instance over HTTPS, so that traffic between the app and your server is encrypted in transit. If you expose your server over plain HTTP on an untrusted network, anyone positioned between you and it may be able to observe that traffic — this is a property of your server setup, not something the app can fix.

Children's privacy

The SideShelf app is not directed at children under 13 and does not send their personal information or Audiobookshelf library data to a SideShelf app service. The website-hosting disclosure above applies to all visitors.

Changes to this policy

If this policy changes, the revised version will be posted on this page with an updated date above. Material changes — particularly any that would add data collection — will also be noted in the app's release notes. The full revision history of this page is public in the website repository.

Contact

Questions about this policy, or about how SideShelf handles data, can be raised as an issue on our GitHub repository.

← Back to home