Privacy policy

knowdust collects the minimum it needs to work. In full:

• Account data. Your email address and login credentials, handled by Supabase (our authentication provider). Used to sign you in and to reach you about your account.
• Note content. Your notes, stored as plain-text files with their Git version history on Hetzner servers in the EU. Stored so we can show your notes back to you and let you restore any version.
• Billing. Payments are handled entirely by Polar as Merchant of Record. knowdust never sees or stores your card details — we only learn which plan your account is on.
• Analytics. Datafast, a privacy-focused analytics service — page views and product events, with no cross-site tracking and no ads. Used to understand which parts of the product get used.
• Signup source. A short ref tag on signup links (for example, which page you signed up from). Used only to understand where users come from.

Your notes and their version history are stored on Hetzner servers in the European Union. That's where they stay.

• We don't sell your data. To anyone, for anything.
• We don't run ad tracking or cross-site tracking.
• We don't read your notes — except when strictly required to operate the service or to investigate abuse.
• We don't train AI on your content.

Each user's notes live in their own separate Git repository. Your notes are not mixed with anyone else's.

Your notes and their history exist until you delete them, or delete your account. Deleting your account removes your notes, their version history, and your account data; copies in backups cycle out within 30 days.

You can access and export everything yourself — zip export is built into the product and always free, on every plan. You can correct your account details in settings and delete your account at any time.

If you're in the EU, you have the GDPR rights of access, rectification, erasure, portability, and objection. To exercise any of them, email [email protected] and we'll respond promptly.

knowdust relies on four services, each with a specific role:

• Supabase — authentication and account data.
• Polar — payments, as Merchant of Record.
• Hetzner — hosting, in the EU.
• Datafast — privacy-focused analytics.

knowdust uses essential cookies only — the session cookies that keep you signed in. Analytics is cookieless: Datafast doesn't set cookies and doesn't follow you across sites.

Privacy questions: [email protected].