Privacy
Privacy.
The URLs you save, a device token, a sync cursor. That is the whole list.
What is stored
| Data | Why | Kept for |
|---|---|---|
| Saved URLs and resolved titles | It is the product | 30 days, or until midnight after reading |
| Device token | Authentication | Until you remove the device |
| Last sync cursor | So reconnects do not refetch everything | Until the device is removed |
What is never collected
No analytics, no third-party scripts, no fonts loaded from someone else's server, no advertising identifiers, no email address unless you write to me first. This page loads nothing from outside this host, and neither does any other page here. You can check that in the network tab, which is the only kind of privacy claim worth making.
Logs
The web server keeps access logs — timestamps, paths, response codes — for about two weeks, for debugging. Client addresses are truncated before they are written.
Export and deletion
Any client can export the inbox as JSON. Deleting an account removes items and tokens in the same transaction; backups roll off within seven days.
Last updated 2 October 2026.