Privacy

Last updated 30 September 2026

The short version

What we store

How sign-in works

There are no passwords. When you sign in, we email you a one-time code and a sign-in link. The app then keeps you signed in by storing a session on your device.

Who can see your things

Only you, and the people you share a space with. That rule is enforced by access controls in the database itself, not just by the app. People you share a space with can see its content and who else is in it.

As the people who run the service, we can technically access the database. We only do so to keep the service running, to look into a problem you’ve asked us about, or when the law requires it.

Services we use

A small number of companies process data on our behalf, each only to do its part of running What’s Left:

Cookies and analytics

This site doesn’t set cookies. We count page visits with Cloudflare’s page analytics, which don’t use cookies. The app stores your sign-in session and a working copy of your data on your device, so it opens quickly and can hold changes you make offline.

What we don’t do

We don’t show ads. We don’t sell your data, and we don’t share it with anyone for marketing.

Keeping and deleting your data

We keep your data for as long as you have an account. You can export any space as Markdown whenever you like. To delete your account, open Account settings in the app; deleting your account deletes your data.

Changes to this policy

If we change this policy, we’ll update this page and the date at the top. If a change affects how your data is used, we’ll tell you in the app.

Contact

Questions, requests, or anything else about your data: email hello@whatsleft.click.