Privacy

Stored data

Your name, email, settings document (with revision history), project definitions, hashed authentication tokens and passkey public keys, and the documents you publish. Settings pushes record which device sent them.

Credential protection

Passwords and tokens are stored as hashes. The server-side deny-list removes secret-shaped keys from synced settings.

Analytics

Published artifacts count views. We use no third-party trackers or advertising technology.

Sharing

You choose each artifact’s visibility. Unlisted artifacts use unguessable links. Public artifacts can also use readable links. We do not sell or share your data with anyone.

Deletion

Deleting your account deletes your settings, projects, tokens, and published documents.