Privacy

• —Your waitlist address, if you join: the waitlist is a Google Form, so the address you type there reaches Google as well as us, under Google's privacy policy alongside this one. This site stores nothing itself — the button only links out.
• —Your account, from Google or GitHub when you sign in: your name, your email address, your profile picture and the account identifier that provider issues. There is no password, because sign-in never passes through us.
• —Your content: project names, file paths, the text you write, the comments you leave and any images or other files you upload.
• —Technical records: your IP address, your browser's user-agent string, and the timing and outcome of each request, written to server logs.

Nothing else is collected. There is no analytics script, no advertising pixel and no third-party tracker on any page.

To run the service you asked for: to sign you in, to keep your documents, to sync them between the people you shared them with, and to compile them into a PDF. The technical records exist to keep the service available — to apply rate limits, and to work out why something failed.

• —Google or GitHub, whichever you sign in with. They tell us who you are; we tell them nothing about what you write.
• —Cloudflare, which serves the application and terminates TLS, and so handles your IP address.
• —The hosting and database providers that run the application and store its data.
• —Anthropic, and only when you use the writing assistant: the passage you selected is sent to the model and the reply comes back. If you never use the assistant, nothing you write leaves our own infrastructure.
• —Google Drive, and only when you import from it or save a PDF to it. Your browser talks to Google directly: we never hold a Drive token, and we can reach only the files you picked and the files we put there. If you never use it, your browser never contacts Google Drive at all.
• —Anyone you share a project with, at the level of access you gave them.

Your content is never sold, never used to train a model, and never handed to an advertiser.

One cookie, which holds your session so you stay signed in. It is essential to the service and there is nothing to opt out of. There are no analytics or advertising cookies, which is why you are not being asked to dismiss a banner.

• —Projects and their contents: while your account exists, or until you delete them.
• —A deleted project: recoverable from Recently deleted until it is purged, after which it is gone from the live database.
• —Server logs: short-lived, and kept only long enough to diagnose a failure.
• —Backups: a deleted project may persist in a database backup until that backup rotates out.

Any project can be downloaded as a .zip from the Files menu, at any time, with every file exactly as you wrote it. That is a complete copy — there is no export queue and nothing to request.

Deleting your account, from your profile page, removes your user record. Projects you own that nobody else is on are destroyed with it, along with their contents. Projects you own that other people are still on are handed to the collaborator who joined first, so their work is not destroyed with your account. None of this can be undone, so download what you want to keep first.

Traffic is TLS-encrypted end to end. Sign-in is delegated to Google or GitHub, so no password of yours exists here to leak. Access to a project is checked against the database when a connection opens and re-checked while it is open, and a viewer's connection is read-only on the server rather than merely in their browser.

This page will change as the service does, and the date at the top is when it last did. For anything about your data — a question, a correction, or a request to delete something — write to [email protected].