Legal
Privacy
Jotspeed is operated by Hess Holdings. This page is the whole privacy policy. Last updated 10 September 2026.
Device-only journal
You do not need an account to write. Entries live in the app on that device (the browser or Home Screen app’s private storage for app.jotspeed.com). We do not receive them. Clearing site data, using another browser, or a new phone starts a blank journal.
Export a TXT or PDF if you want a file you hold.
If you sign in
We store:
- A slow hash of your password, plus salts — never the password itself
- A session token so this device stays signed in
- Whether Pro is active, and when that access ends
The password also derives the key that encrypts your backup. We cannot read that backup, reset the password by email, or recover entries if you lose the password and have no signed-in device.
If you subscribe to Pro
Card numbers go to Stripe, not to us. We keep Stripe customer and subscription ids, and the fact that you paid, so we can turn sync on and off.
The sync server (sync.jotspeed.com) stores one encrypted blob per account. That blob is ciphertext. We cannot read your journal.
What we do not do
No ads. No selling your data. No third-party analytics in the app. We do not store plaintext entries on our servers.
The marketing site and app are hosted on Cloudflare. Like any host, they see IP addresses and request metadata.
If you write support@jotspeed.com, we have that email and the message.
How long
Device storage lasts until you wipe it, clear the site, or delete the app. Account records and the encrypted blob last until you ask us to delete the account, or you wipe from a signed-in Pro device (that updates the backup too).
Changes
If this policy changes in a way that matters, we will update this page and the date above.
Contact
See also how storage works and terms.