- Where your record lives
- Without an account, in this browser’s storage on your device: nothing you enter is sent to a server, and we cannot see it, recover it, or hand it to anyone. With an account, an encrypted copy is also kept on our server so it reaches your other devices and the family you invite. We hold the key that opens that copy, so we could be compelled by a court to produce it.
- How it can be lost
- Clearing browser data erases it. Safari can erase a website’s data after seven days without a visit unless the site is on your home screen. A page opened inside Telegram or Facebook keeps its data apart from your normal browser. A backup file protects against all three.
- Backup files
- A backup is encrypted on your device with your passphrase before it is saved. Nobody can open it without that passphrase, and nobody can reset it.
- Shared devices
- Shared-device mode keeps the record only until the tab closes. The Exit button hides the page and opens a weather site; it does not erase browser history.
- Contact form
- What you type into the contact form (name, email, phone, link and notes) is sent to us so we can review it and reply. We use it only for that, and we delete it if you ask.
- What we never ask for
- A-numbers, passport numbers, Social Security numbers, or payment.
- Measurement
- We count page views by page, language and day, and a few button counts (for example, how many readers tried the demo). We store no IP address, cookie, or identifier, and we never count anything on pages that show your record. Our host keeps standard request logs for up to a day.