Privacy Policy

This policy explains what HushJournal stores when you use the website and the hosted journal at hushjournal.com.

What we cannot read

Notebook names, page titles, and page text are locked on your device before they are saved. We store the locked copy. We do not have the secret that opens it, and we do not try to unlock it.

If you lose that secret, we cannot read or restore those notes.

What we do store

Your account. If you sign up with a username and password, we store your name, username, and a hash of your password. We do not store the password itself. If you sign in with Google, we store the account id Google gives us, the email and picture Google shares for that account, and your name. We also store when the account was created and when you last signed in.

Your journals. We store each journal’s name as ordinary text, so the journal list can be shown before a journal is unlocked. We also store an optional hint as ordinary text if you choose to save one. Colors, whether names are masked, and the size of a journal are stored as ordinary settings.

The material that locks and unlocks a journal is stored as opaque data. We do not use it to read your notes.

Your pages. Besides the locked title and text, we store the page’s calendar date, when it was created or changed, and how large the locked copy is.

A sign-in cookie. After you sign in, the app sets an HTTP-only cookie named session. The cookie holds a random id. We store only a hash of that id, and we use it to know which account is signed in. Signing out or deleting your account removes that session.

Google sign-in

If you choose Google, Google handles that sign-in and receives the fact that you used it. We then receive the account id, email, picture, and name described above. Google’s own policy is at policies.google.com/privacy.

The public website

The public pages on this site count visits and a few actions, such as choosing Login. That count is used to see which pages are used. It is not used to build a profile of you, and it is separate from your journal.

How long we keep it

We keep account and journal data while your account exists. If you delete your account, the account and its journals, notebooks, and pages are removed.

Server backups may keep a copy for a short time after that. Locked notes in a backup still cannot be read by us.

Who else sees it

We do not sell your information. We do not share your journal with advertisers.

The service runs on computers we operate or rent. Those machines store the data described above so the journal can work. We may also share information if the law requires it. What we can share about your notes is the locked copy and the ordinary fields listed above, not the text of the notes.

Children

HushJournal is not meant for children who are too young to agree to these terms where they live. Do not create an account if that is you.

Changes

If this policy changes, we will update the date on this page.

Contact

Questions about this policy: admin@hushjournal.com.