Privacy
What Thoughtfold stores, where, and who can see it.
This page is a generated template based on what the app code does. The maker should read it and correct anything that does not match before relying on it.
- The app keeps its data in your browser (local storage or IndexedDB). Clearing site data for this address removes it. Nothing is sent to a server unless a point below says so.
- A service worker caches the app files on your device so the app opens quickly and works offline. Your browser removes the cache when you clear site data.
- The app loads resources from these third-party hosts: buymeacoffee.com, fonts.googleapis.com, fonts.gstatic.com. Those hosts see your IP address when the app loads them.
- The app sets no cookies.
- This app uses the platform's own analytics, served from chat.at-find.com. It counts page views, clicks on links that leave the site, and clicks on the monetization link if there is one. It also counts clicks the app marks as one of these actions: start-fold, complete-fold, export-card.
- What each measurement sends: the kind of event, the page path reduced to at most three short segments, the hostname of the site you came from, the utm fields already present in the address, and a random value for this browser tab. It does not send cookies, a durable identifier, the raw query string or fragment, link text, form values, the page title, your user agent, or any screen or device measurement.
- Ordinary network information, such as your IP address, reaches the server as part of any web request. The analytics service does not store it and does not write it to its application logs.
- The tab value is a random number kept in this tab only, in sessionStorage, and it is closed with the tab. The server hashes it one way together with the app name before storing it, so what is kept estimates tabs rather than identifying people, and it cannot be matched with any other app.
- These counts are best effort. Public web traffic can be forged by anyone, so the numbers describe traffic, not verified visitors.
- Only totals are stored, never a list of individual visits, and they are removed 30 days after the day they cover.
- If your browser sends Global Privacy Control or Do Not Track, the script stops before it sends anything, and the server would refuse the measurement as well.
- When the maker clears these analytics, the totals leave every report at once. The store rewrites its own append-only file later, which is when the old bytes go. Analytics is deliberately left out of backups, so a restore from backup starts with nothing.
- The footer has one link to buymeacoffee.com, which handles the payment and has its own privacy policy. This platform does not verify the recipient, fulfilment, purchases, or revenue. Following that link is counted as a click, never as a purchase.
- The files are served from thoughtfold.apps.at-find.com by Cloudflare Pages, whose request logs are covered by the Cloudflare privacy policy.
Questions about this page go to [email protected].
Last updated 2026-09-18.