Drafts you write without an account
You can use the editor without signing in. Drafts written that way never reach our servers — they live only in your browser's local storage. Clearing your browser storage deletes them permanently, and we have no copy to restore.
Draft content is sent to our server only while you are signed in, through authenticated endpoints that read and write your own drafts.
What we store if you sign up
- Account: the email address and name you enter at signup, whether that email has been verified, and the dates the account was created and last changed. Passwords are stored only as a hash, never as the text you typed. We do not collect a profile photo, and there is no social or third-party login.
- Sessions: a session record with its token, expiry, and the IP address and browser user-agent string seen when the session was created.
- Drafts: the title, markdown content, and selected platform of each draft you save, plus timestamps.
Cookies
The site sets two cookies, both strictly necessary for signing in: a session token cookie (http-only, secure, SameSite=Lax, about seven days) and a short-lived cookie holding cached session data. There are no advertising or analytics cookies.
Analytics
We use a self-hosted Umami instance, served through this site's own domain. It runs without cookies. Beyond page views, it records a small set of product events — that content was edited, that a tool block was copied, a first interaction with a tool, which platform was selected, and named user actions.
Those events carry only lengths, true/false flags and action names. They do not contain your draft text, your email address or your user ID. The analytics script is not loaded at all for automated browsers.
Email
Email is sent through Amazon SES and is transactional only: an address-verification email when you sign up, and a password-reset email when you request one. There is no marketing or newsletter mail.
If you send feedback through the in-app form, the message is emailed to the site operator together with any contact email you type, the page URL you were on, and — if you are signed in — your user ID and account email. A screenshot attached to a bug report is uploaded to Amazon S3 under a random filename. Draft content is never uploaded to S3.
Service providers
The application and database are hosted on Railway. Email delivery and screenshot storage use Amazon Web Services. Analytics runs on a server we operate ourselves. We do not use third-party advertising networks, tracking pixels, hosted error-tracking services, or third-party AI APIs, and we do not sell your data.
How long we keep things
We keep your account record and your saved drafts for as long as your account exists. Nothing expires on a schedule and there is no automatic clean-up — your drafts stay until you delete them or ask us to delete your account. Session records expire on the date stored with them, and feedback emails are kept until they are cleared manually.
Deleting your data
You can delete your own account from the Settings dialog while signed in. You confirm by typing your current password. Deletion is immediate and permanent: it removes your account record, your drafts and your sessions from the database. There is no recovery and no grace period.
If you cannot sign in, email [email protected] and we will delete your account by hand. The same address handles requests for a copy of your data or a correction to it.
Drafts held only in your browser are not ours to delete — clear your browser storage for this site and they are gone.
Changes
If this policy changes, the updated version is published on this page with a new effective date.