Privacy policy

What stdin stores on our servers

• Account data — your email address and a salted hash of your password (never the password itself).
• Waitlist signups — the email you submitted and a timestamp.
• Session and authorization tokens — signed login cookies and OAuth tokens you grant to connected apps (such as Claude), so your devices and agents can reach your stream.
• Routing metadata — operational logs (timestamps, request paths, IP addresses) kept briefly for security and debugging.
• What your agents did — a short log of each change an AI or the assistant made (which agent, which tool, a one-line summary such as the task text, and the lines needed to undo it), the last 200 per account, shown in Settings so you can review and undo. This log contains snippets of your own content; deleting your account removes it.
• Assistant conversations — if you use the in-app assistant (the “Ask” tab), your last 40 messages with it are kept so the conversation has context. Those messages, and whatever the assistant reads from your vault to answer, are sent to Anthropic's API to generate the reply, under Anthropic's privacy policy. Screenshots you pipe in and the automatic filing of captures into projects use the same API. Nothing else is shared.
• Push subscriptions — if you turn on the nightly reminder, the push endpoint your browser issues and your timezone.

Hosted vaults

If you chose “host it for me” at signup instead of linking your own computer, your markdown files live in a folder of their own on our server, run by a copy of the same engine that is isolated per account. Every file is encrypted at rest with a key unique to your account (AES-256-GCM); that key is itself stored only wrapped by a server master key that lives outside the data volume, so a copy of the storage on its own is unreadable. The engine that serves your account holds your key only while it runs. The files are yours to take at any moment with Download everything in Settings (you get plain markdown); deleting your account deletes the folder and the key.

The server's data volume — account database and encrypted vaults — is backed up nightly to a machine the founder controls, as a snapshot encrypted a second time with a key that never touches the server. Fourteen days of snapshots are kept.

On your own device

The app keeps a copy of what it last showed you, and any changes you make while offline, in your browser's storage on your phone or computer so it still opens with no connection. That copy never leaves your device and is cleared when you clear the site's data.

The offline copy (relay)

• Your vault is markdown files on your own computer — that copy is always canonical. When your computer is on, your data passes through our relay in memory to reach it and is not written to our disks.
• So the app still works when your computer is asleep, stdin keeps an offline copy of what it last showed you (your tasks, journal, and the app itself). This copy is encrypted at rest with a key unique to your account — a key that is itself stored only wrapped by a server master key kept outside the data volume, so a copy of the storage alone reveals nothing — and captures you make while offline are queued and sent to your computer when it wakes.
• Agents can never touch the offline copy. AI assistants connected via MCP can only read or change your stream while your computer is on; when it's asleep they are refused. The offline copy serves your own logged-in app only. What each connected assistant may do (see tasks, change tasks, read the journal, write the journal, remember facts) is chosen by you when you approve it, and every change it makes is logged with an Undo in Settings.
• You can turn the offline copy off entirely in Settings (“Work offline”) — then nothing is cached, and the app simply waits for your computer.

What stdin does not store

• Your full vault (own-computer accounts). Only the small, recent slice the app last displayed is cached (encrypted) for offline use; the complete history lives only on your machine. Hosted accounts are the exception described above.
• No analytics or trackers. The site and app load nothing from third parties and set no advertising cookies.

Link previews

When you capture a link, our server fetches that page once to read its title so your task has a name. We don't store the page.

Connected agents

If you authorize an AI assistant (Claude, ChatGPT, Gemini, or any MCP client) via OAuth, it can read and write your stream on your behalf, within the permissions you ticked. What that assistant's provider does with data it reads is governed by their privacy policy, not ours. You can revoke an agent's access at any time and it takes effect immediately.

Sharing and selling

We don't sell, rent, or share your data with anyone, full stop. We would disclose data only if legally compelled — and the design above means there is very little to disclose.

Deletion

Your files are already yours — deleting your account removes everything we hold (account record, tokens, waitlist entry). Email us and it's done within 7 days.

Contact

shelabd92@gmail.com