Privacy Policy
Last updated: April 2026
What we collect
We collect only what's necessary to run the service:
- Your email address, when you create an account or join the waitlist
- The content you capture (items, notes, tags) — this is your data
- Basic usage events stored in our own database (no third-party analytics)
- Server logs (IP addresses, request metadata) retained for 30 days
What we don't collect
- No advertising or marketing trackers
- No cross-site tracking
- No non-essential cookies — no cookie banner needed
Traffic analytics on this site are provided by Cloudflare Web Analytics — privacy-first, no cookies, no fingerprinting, no data sold to advertisers.
How we use it
- To provide and improve the service
- To send transactional emails (password reset, email verification)
- To notify waitlist subscribers when the service launches
We do not sell your data. We do not share it with third parties except infrastructure providers (Fly.io for hosting, Neon for the database, SendGrid for email) who process it only on our behalf.
Cookies
The only cookie we set is a strictly necessary HTTP-only auth cookie used to keep you logged in. No consent is required for strictly necessary cookies under GDPR.
Your rights
You can request a copy of your data or ask us to delete it at any time. Email [email protected]. We'll respond within 30 days.
Data retention
Account data is retained until you delete your account. Waitlist entries are retained until you unsubscribe or request deletion. Server logs are retained for 30 days.
Changes
If we make material changes to this policy we'll update the date at the top of this page.