Data policy

The privacy policy covers who can see what. This page is the mechanical half: the exact list of what is stored, where it lives, how long it stays, and how to get it out again.

Everything that is stored

Two things, and no others.

Your account. Name, handle, email address, a bcrypt hash of your password, your bio, any sections you invented yourself, and the dates the account was created and last changed.

Your entries. Title, the URL slug, the text itself, its excerpt, the date the entry is about, its tags, its section, whether it is a draft, private or public, and the times it was created and last edited.

There is no location data, no device fingerprint, no advertising identifier, no behavioural profile and no third-party analytics. Nothing tracks you between pages, and nothing follows you off the site.

Where it lives

In a MongoDB database, reached only by this application's server. Traffic to the site travels over HTTPS. Server logs kept by the hosting provider may include IP addresses and request paths for a short window, as they do for any website; those are operational, and are not joined to your account or used to build any profile.

How long it is kept

Your entries stay until you delete them. Deleting an entry removes the record — it is not moved to a bin and it is not recoverable, so delete carefully. Your account stays until you ask for it to go.

Backups may hold a copy for a short period after a deletion, and those roll off on their own schedule.

Getting it back

Everything you have written is on your own pages while you are signed in — drafts and private entries included — so a copy is always a select-all away. Your writing is stored as plain markdown, which means what you copy out is exactly what you typed, readable in any editor, with nothing proprietary about it.

Changing and deleting

Your name, handle and bio can be edited at any time from your desk. Any entry can be edited, made private, or deleted from the same place.

To delete the account itself — it and every entry on it — write from the address the account uses, and say so. Be aware that deleting your account does not reach into copies other people already made of anything you published.

Your rights

Depending on where you live you may have the right to access, correct, export, restrict or erase what is held about you, and to object to it being held at all. The controls above are meant to make most of that something you can simply do rather than something you have to ask for; for anything they do not cover, ask.

If something goes wrong

If there is ever a breach that puts your account at risk, the affected people will be told what happened, what was exposed, and what to do about it.