1. Who operates this service
This policy applies to Just One Thought, the private online journal on this domain. Contact the operator at support@your-domain.com. Before public launch, the operator must add its legal identity, address, jurisdiction, and any applicable regional privacy rights to this policy.
2. What we store
We store your name, email address, a password hash, an optional PIN hash, subscription records, journal entries, and uploaded files. Entry titles, body text, attachment filenames and attachment bytes are encrypted at rest with a server-managed key.
The following remain database plaintext, because the application must sort, filter or chart them: notebook names and colours, entry dates, word counts, mood scores, file MIME types and sizes, and account/subscription metadata.
3. How your information is used
Information is used to provide your journal, enforce subscription access, show your personal insights, secure accounts, and send requested password-reset emails. No advertising trackers or third-party analytics are included anywhere on this site. We do not sell journal content, and we do not use it to train anything.
4. Encryption, and its limits
This service uses server-side authenticated encryption (XChaCha20-Poly1305 with fresh nonces and a server-held key), not end-to-end encryption. Authorised server operators with the application key can technically decrypt stored content. HTTPS protects data in transit. A PIN is an additional application lock, not a substitute for device security or your account password.
5. Cookies, sessions and offline drafts
A necessary, HttpOnly session cookie keeps you signed in. Sessions expire after 30 minutes of inactivity and 12 hours absolute by default, and changing your password or PIN invalidates other sessions. No advertising or analytics cookies are set.
The service worker caches only public pages and static assets — never authenticated responses or attachments. Optional offline drafts are encrypted in your browser with AES-256-GCM using a key derived from a passphrase you choose (PBKDF2-SHA256, 310,000 iterations); the key is never written to storage. A forgotten offline passphrase cannot be recovered. Clearing browser data or signing out removes local drafts. Your device or browser provider may retain its own backups.
6. Service providers and payments
The hosting provider processes server data on our behalf. Password-reset messages, when enabled, are handled by the operator's email provider. Checkout in this release is a demonstration: no card numbers, PayPal credentials or M-Pesa PINs are requested, and no payments are processed. Operators must update this policy before connecting live providers.
7. Retention, export and deletion
Journal entries remain available in read-only mode after subscription expiry or cancellation. You may delete individual entries while write access is active. All users can request account or data deletion from support, including read-only users. PDF export remains available to signed-in, unlocked accounts.
The operator must define backup retention periods, deletion response times and any legally required record-retention duties before public launch.
8. Your choices and rights
Contact support to request access, correction or deletion, raise a privacy concern, or exercise rights under applicable law. This service is not designed for children under 18. Specific regulator contacts, cross-border transfer safeguards and legal bases must be completed by the operator where required.
9. Changes to this policy
Material changes will be dated at the top of this page and, where required, communicated by email before they take effect. Continuing to use the journal after a change means you accept the updated policy.