Skip to content
CarryjotWrite it once. It carries itself.Open my board

Privacy, in plain English

There are no accounts, so there is very little about you for us to have. Here is exactly what exists and where.

Your solo workspace never leaves your browser

Until you press Share with team, everything you type is stored in this browser's IndexedDB and nowhere else. We cannot read it, cannot back it up, and cannot recover it. If you clear your browser data or use a different device, it is gone — that is the trade for needing no account.

Shared workspaces: the link is the key

Sharing copies your workspace to our database and gives it an unguessable address like /w/x7Kp9qR2vQ. That is roughly 71 bits of randomness, so it will not be found by guessing. But it is the only protection:

  • Anyone who has the link can read and change everything in that workspace.
  • There are no passwords, roles or permissions in this version. Names in the app are labels, not identities — anyone can pick any name.
  • Treat the link like a key under the doormat: fine for a team, wrong for anything sensitive. Don’t put personal data, credentials, or client confidential material in a shared workspace.
  • We set the pages to noindex and block crawlers, and we strip the referrer so the link is not passed to sites you click through to. If someone forwards the link, though, they have forwarded the access.

What we store, and for how long

  • Shared workspace contents: the items, projects and names you put in them, until they are deleted.
  • A last-seen timestamp per shared workspace, so that inactive ones can be cleaned up. A shared workspace untouched for 180 days is deleted permanently, along with everything in it. Opening or editing it resets the clock.
  • Anonymous counters: that a workspace was created, that an item was created or completed. No IP addresses, no user agents, no identifiers, nothing tied to you or to the contents. They exist to answer “is anyone using this?” and nothing else.
  • Ordinary server logs and error reports from our hosting and error tracker, which briefly hold request metadata such as IP addresses so we can keep the service up and fix crashes.

Cookies and tracking

No advertising cookies, no third-party trackers, no cross-site profiling. Aggregate, anonymous page-view counts come from Vercel Analytics, which does not use cookies or store personal data. The only things kept in your browser are your workspace itself and small preferences such as which name you picked.

Deleting things

Delete a solo workspace by clearing this site's data in your browser. For a shared workspace, delete the items you care about and then simply stop using it — it disappears on its own after 180 days. If you need it gone sooner, use the feedback link in the footer with the link, and we will remove it.

This is a free tool with no accounts; it is not a data processor for regulated data. If your work needs audit trails, access control or a retention guarantee, this is not the right tool yet — see Data & limits.