Privacy policy
Last updated: this is a draft for the beta prototype.
Placeholder text. Have a lawyer review this before Jackdaw Book takes its first real user.
The short version
The names you save never leave your device. Jackdaw Book has no server that stores them, no account system, and no way for us to read your memory book.
What stays on your device
Names, relationships, circles, birthdays and notes are written to your browser's local storage. They are not transmitted anywhere. Clearing your browser data erases them, which is why the account page offers a backup file.
We do not sell your data
We do not sell, rent, trade, or share your personal information with data brokers, advertisers, or anyone else. This is not only a promise about our conduct — it is a consequence of how the app is built. The names, relationships, birthdays and notes you enter are never transmitted to us, so there is nothing on our side to sell. We have never sold user data and have no plan to start.
If that ever changed, it would require a new version of this policy, notice on the site, and your explicit opt-in. We would not apply it retroactively to anything already on your device.
Encryption
Two different things are encrypted, and it is worth being precise about which is which.
- In transit. The site is served over HTTPS (TLS). Every page, script and style sheet reaches you over an encrypted connection, and the site is configured to refuse plain HTTP.
- At rest, on your device. Optional and off until you turn it on. Set a passcode on the account page and your whole book is encrypted with AES-256-GCM before it is written to browser storage. The key is derived from your passcode with PBKDF2-SHA256 at 200,000 iterations and is held only in memory while the page is open. The passcode itself is never stored or transmitted, which also means we cannot reset it or recover your names if you lose it. Backup files you export are encrypted with the same key.
Without a passcode set, your names are stored unencrypted in your browser and are readable by anyone who can unlock your device. The status shown on the account page always tells you which state you are in.
Because your data never reaches a server, there is no server-side database of user names to breach, encrypted or otherwise.
Artificial intelligence
This site and its written content were built with the help of AI, specifically Claude by Anthropic. AI has no access to the names you save: nothing you enter is sent to an AI system, used to train a model, or processed off your device. Our AI governance policy covers this in full.
What third parties may collect
If you accept on the consent banner, two Google services load:
- Google Analytics 4 — page views, approximate location, device and browser type. IP anonymization is enabled. Used to see which pages people actually visit.
- Google AdSense — serves the ads that keep Jackdaw Book free. Google may set cookies and use them to personalize advertising. Neither service can read the names you save.
Decline on the banner and neither loads. You can change your mind by clearing this site's data in your browser.
Google's own handling of that data is covered by their policies. Ad personalization can be turned off at Google's Ads Settings, and browser-level opt-outs are also available.
Children
Jackdaw Book is not directed at children under 13 and does not knowingly collect information from them.
Your rights
Because we hold nothing about you, there is nothing for us to hand over or delete on request. To erase your data, use the erase button on the account page or clear this site in your browser. For anything Google holds, contact Google.
Changes
If this policy changes materially, the updated date at the top of this page changes with it.
Who to ask
Project Research LLC. Reach us through the contact page.
