Placeholder. It describes the template as shipped; update it as the product changes, and have it reviewed before launch.
Privacy notice
What we keep
- A key made from your email address: a one-way code that finds your account each time you sign in. Your address itself is never stored: it is used to send the sign-in email, then discarded.
- A masked address: the first letter and the domain, such as h•••@example.com, so you can see which account you're signed in to.
- Sign-in requests: the key and the masked address, when you asked to sign in, and whether you did. Deleted once they expire.
- Passkeys: a public key for each one you add, its name, and when it was last used. Your device keeps the private key; we never see it, or your face or fingerprint.
- What you write in the app.
On your device
The app stores pages you've opened and anything you write while offline, so it works without a connection. Signing out removes the saved pages.
Cookies
One cookie keeps you signed in, and one protects forms from forgery. There are no analytics or advertising cookies.
Visitor counts
We count visits with fivebar, which sets no cookies. For each page you open it receives the page, the page you came from, your browser, device type and country, and when you create an account. It keeps daily totals only, which can't be traced back to you; your IP address and browser details tell visitors apart for one day and are not kept. Addresses that hold a sign-in link or a record are counted without it. See fivebar's privacy policy.
Who else sees it
Our hosting and email providers, and fivebar for visitor counts, process data on our behalf. We don't sell it or share it with anyone else.
Your rights
You can ask for a copy of your data, or for your account and everything in it to be deleted. Because we don't keep your address, we can't email you, and we find your account by asking you to sign in.
Contact
Placeholder: add a contact address.