Privacy

Thoughtscape is built so that most of what you write never reaches our server. This page explains exactly what does.

Thoughts in your library

Thoughts you write are saved in your browser’s storage (IndexedDB) on your device. Unless you turn on Neural Sync (below), they are not uploaded, synced, or backed up by us, and we can’t read them. This applies whether or not you have an account. Private links between thoughts, and the tags you add, stay there too.

Browser storage isn’t encrypted. Anyone who uses the same browser profile on your device can open your library, and clearing your browser’s site data deletes it. Use Export in your library to keep a backup.

To suggest related public thoughts, your browser downloads a list of recently published thoughts and compares them with your writing on your device. Your writing isn’t sent anywhere to do this.

Neural Sync (optional, end-to-end encrypted)

If you turn on Neural Sync in your settings, your browser encrypts each private thought (its title, text, tags, links and dates) with a key made from a sync passphrase you choose, before sending it to us. The key never leaves your devices, and we never see your passphrase, so we can’t read what we store, and neither could anyone who broke into our servers.

What we can see: that you use sync, how many thoughts you sync, their approximate sizes, a random identifier for each, and when they change. We also store the salt and a small encrypted check value your devices use to confirm the passphrase.

If you forget your sync passphrase, we can’t recover the encrypted copies. Thoughts already in your browsers are unaffected. You can delete the encrypted copies at any time in your settings, and they are deleted with your account.

What we store when you have an account

• Your name, email address, handle, bio, and profile picture (if your sign-in provider supplies one).
• Your password, stored only as a secure hash, if you sign up with email.
• Your signed-in sessions, including the browser description and IP address of each, so you can see and sign out devices in settings.
• Thoughts you publish, the links you add between published thoughts, and the notes you write on those links.
• Reports you send and people you block.

Your email is never shown publicly. Everything you publish, and your name, handle, bio, and picture, are public. Published thoughts can be read by anyone and may be indexed by search engines.

Emails

We only email you to confirm your address and to reset your password. There are no newsletters or tracking pixels.

Cookies

We use one essential cookie to keep you signed in, plus short-lived cookies during sign-in with Google or GitHub. There are no advertising or analytics cookies. Your light or dark theme choice is saved in your browser.

Sharing

We don’t sell your data or share it with advertisers. If you sign in with Google or GitHub, that provider tells us your name, email, and picture. Our hosting and email providers process data on our behalf to run the service.

Your choices

• Unpublish any thought at any time. The public copy and its links are deleted.
• Download everything we store about your account from Settings.
• Delete your account from Settings. This deletes your profile, published thoughts, links, reports, and sessions.

Questions or requests: [email protected].