Privacy

Jot has no accounts, no analytics and no tracking. Your documents live on the devices of their members. This is everything our server can see.

What the server sees

• IP addresses: Of every browser that connects, as with any website.
• Document ids: A random id, registered when a document is created and used to find other members online.
• Peer ids: A random id per open tab, never stored and not linked to who you are.
• Invite tags: An opaque value that lets the inviting owner's browser receive a join request. It does not reveal the invite.
• Ciphertext sizes and timing: When join requests and connection setup messages are sent and how large they are, all encrypted.

What is never sent to the server

• Document names, text or formats.
• Who the members are: no user ids, no public keys, no roles.
• The invite secret, which stays in the link after the # and in the owner's browser.
• Your document keys, or any edit in readable form.

What other members see

Members who are online together connect directly and can see each other's IP address. When a connection needs a relay, the relay only carries encrypted bytes.

On your device

Your identity, documents and keys are kept in this browser's storage and are not encrypted at rest. Forgetting a document removes it from this device only.