A little space to reflect
Opening your journal…
When you save an entry, its text and mood briefly reach our server as readable text so they can be encrypted with your public key. Stored entries can only be opened with your private key. The browser code we provide opens them for you, so using the app requires trusting that code.
We store your email, name, time zone, entry dates, reminder preferences, and personal quotes in readable form. Reminder emails contain prompts and quotes, never your entries. Personal quotes are readable so they can appear in those emails.
Your passphrase, recovery code, and unwrapped private key stay in your browser. We cannot reset them. Without a passphrase, recovery code, or device that remembers your key, your entries cannot be recovered. “Remember this device” stores a non-extractable key in this browser until you lock and forget the device or sign out.
Unsent drafts are stored as readable text on this device. We try to clear them when saved or when you sign out. A cookie keeps you signed in. When you agree to the terms, we record the version, time, and IP address used for that acceptance. Feedback you send, along with your name and email, is readable by Fresh Codes and is separate from your encrypted journal.
Deleting your account removes your encrypted journal and account data, including settings, quotes, feedback, and your terms acceptance record, from the live service. It cancels pending reminders and links and revokes your sessions. We try to clear drafts and remembered keys from this browser. Copies in backups, delivered email, downloads, or other devices may remain.
Where the CCPA, as amended by the CPRA, applies, California residents may request access, correction, and deletion; opt out of sale or sharing; limit certain sensitive-data uses; and exercise rights without discrimination. These rights have legal exceptions. California privacy rights.
Where the GDPR applies, you may request access, correction, erasure (the right to be forgotten), restriction or objection to processing, and portability where applicable. You may also complain to a data protection authority. Erasure has legal exceptions. EU data protection rights.
Use Settings to delete your account, or contact Fresh Codes for privacy requests, including if you cannot sign in.
Tell Fresh Codes what’s working or what could be better. Your name and email are shared with us, and feedback is separate from your encrypted journal. Please don’t include private journal content.
Please enable JavaScript to use your private journal. Your browser needs it to manage encryption keys and open entries.