Privacy

Last updated 2026-10-13. Short, because there is not much to say.

What we store

• Your email address, to sign you in and to reach you about your account. Nothing else is sent to it.
• Your username, which is public as part of your page address.
• Your notes and images, as files with a git history, on a server we rent in New York (DigitalOcean). Nightly backups are copied to a second machine.
• Passkeys you add: the public half only. The private half never leaves your device.
• Sessions: a random cookie that keeps you signed in for 30 days, with the browser name and the time it was last used.
• Server logs with request paths and IP addresses, kept briefly for debugging and abuse prevention.

What we do not do

• No analytics, trackers, or advertising. No third-party scripts on any page.
• We do not read your private notes unless you ask us to help with a problem, and we do not sell or share them.
• We do not train models on your notes.

Third parties

• Cloudflare sits in front of the site for TLS and protection; it sees requests the way any proxy does.
• Email delivery for sign-in links goes through a transactional email provider, which sees your address and the link.
• jot, the optional assistant, sends your command and the open note to a language-model provider to compute the answer. It is only used when you run a jot command. Nothing is sent otherwise.

Published pages

Notes in your site/ folder are public on the web at username.tittle.me and may be indexed by search engines. Moving a note out of the folder unpublishes it, but cached copies elsewhere are outside our control.

Page counts. We count views of published pages as we serve them, and show the site's owner views, unique visitors per day and the referring site, by host only, for the last 90 days. No script runs in the visitor's browser and no cookie is set. A visitor is told apart within one day by a hash of address and browser under a key that changes daily and is never stored; the address itself is not kept, and nothing can be traced back to a person afterwards.

Your choices

Every note has a version history (git). Deleting or editing a note keeps earlier versions in your history, visible only to you; nothing is purged behind your back and nothing is restored without you. From inside the app (:account) you can export everything we hold about you as a zip (your markdown files, images, publish dates and an account.json), and delete your account yourself: the notes directory with its history goes immediately, and backups age out within 14 days. You can also remove passkeys and sign out of devices from inside the app, or ask us and we will do any of this for you.

Encrypted at rest: backups are encrypted before they leave the server. The server disk itself relies on the hosting provider's physical security; we say so plainly rather than overstate it.