This policy explains what Sumibako collects when you use sumibako.com, the command line tool and the apps you connect to it, what we do with that information, who else handles it, and how to have it deleted. The short version: your notes are yours. We do not sell your information, we do not show you ads, and we do not use your notes to train AI models.
1. What We Collect
- Your account: your name and email address, and which of our emails we have sent you and whether you turned tips off. Sign-in is handled by Clerk, so we never see or store your password. If you sign in with another account, such as Google, we receive the name and email address it shares with us. If you are signed out, our public pages may show Google's own prompt to sign in with your Google account in one step. That prompt comes from Google and is loaded from Google, and we receive nothing from it unless you accept.
- What you write: your pages, including their titles, text, icons and covers, the images and files you upload, the email reminders you schedule, and settings such as your timezone.
- Coding agents and connected apps: for an API token, its name, the permissions you chose, a short preview so you can recognise it, and when it was created and last used. The token itself is stored only as a one-way hash. For an app you connect, such as Claude.ai or ChatGPT, an identifier for the app, its permissions and when it was last used. We receive only what the agent or app sends when it uses Sumibako, such as a page to write or a search to run, and never the rest of your conversation with it. Each page records which token or connection created it and which last wrote to it.
- Billing: payments are processed by Dodo Payments. We receive your subscription status and a customer reference, and never your card number.
- Where you heard about us: your answer, if you choose to give one during your first week.
- Feedback and reports: what you send us, your email address if you include it, and the IP address the message came from, which we use to stop abuse.
- Usage: Google Analytics records the pages you open on sumibako.com and a small set of product events, such as trying the playground, creating an account or publishing a page, together with your browser, device and approximate location. PostHog records the same kind of thing on our public pages only, and on those pages it may also record a replay of the session: the pages you looked at, where you scrolled and what you clicked. Our hosting providers also keep ordinary request logs, which include IP addresses.
- What analytics is never told. Neither service is ever sent what you write. PostHog does not run while you are in your vault: it stops for the rest of the session the moment you open it, so session replay never records the editor. Google Analytics does run there, and is told that a page was opened and the product events described above. The address of a page in your vault contains its title, so the title is removed before the address is reported and only the page's identifier is left. On our homepage, the replay and the recording of what is clicked both stop the moment the playground opens, so what you write in it is not recorded either. A page you have published is different: its address and title are already public because you made them so, and they are reported as they are. On a published page that is behind a passcode, the replay and the recording of what is clicked both stop as soon as the page loads, so neither the passcode a reader types nor the page behind it is recorded.
2. What Stays on Your Device
So that Sumibako works offline, the app keeps a copy of your vault in your browser and sends your changes when you are back online. Pages you write in the playground on our homepage stay in your browser, and reach our servers only if you create an account and bring them into your vault. Voice dictation uses the speech engine built into your browser: the company behind that browser, such as Google for Chrome, may receive the audio under its own terms, and Sumibako never receives it.
3. How We Use Information
- To run Sumibako: store and sync your pages, send the reminders you set, publish the pages you choose to publish, and let the agents and apps you connect do what you allowed.
- To bill your subscription and apply your plan limits.
- To keep the service safe, including rate limits, stopping spam and abuse, and looking into pages that are reported.
- To learn which parts of the product, and which ways of finding it, are working, by looking at analytics and survey answers in aggregate.
- To reply when you contact us.
- To email you: the reminders you set, a welcome when you create an account, and notices about your account, such as a free plan we gave you, when it starts and shortly before it ends. We also send two kinds of tip: one nudge a couple of days after you sign up if you have not written anything yet, and one note if you have not opened your vault for a month. You can turn tips off from the link in any of them or from Settings, and the rest keep arriving. A reminder email carries your page's title and never its text.
4. Published Pages
Pages are private until you publish them. Anyone with the link to a published page can read it: they see its title, text, icon, cover and when it was last updated, and never your name or email address. Published pages are hidden from search engines unless you turn that on for a page. You can unpublish a page at any time, but copies other people saved, and link previews already shown in other apps, are beyond our control. An app you connect can publish only the pages it wrote itself. Anyone can report a published page, and we may take down pages that break our Terms.
5. Who Else Handles Your Information
We use these providers to run Sumibako. Each processes information to provide its service to us, under its own privacy terms:
- Clerk, for sign-in and accounts.
- Google, if you sign in with your Google account, including through the one-step prompt on our public pages.
- Convex, for our database, file storage and servers.
- Vercel, for hosting the website.
- Resend, for sending email.
- Dodo Payments, for subscription payments.
- Google Analytics, for usage analytics.
- PostHog, for usage analytics and session replay on our public pages. Hosted in the United States. Its traffic passes through sumibako.com on the way, which is why it shows in your browser as requests to our own site.
We share information with authorities only when the law requires it. We will never sell your personal information.
6. How Long We Keep It
- Your pages, files and settings are kept for as long as your account exists. Pages you move to the trash stay there until you delete them permanently.
- When an agent or connected app replaces the text of a page, the earlier version is kept for 14 days, up to the last 20 versions, so you can restore it.
- Revoking a token or connection under Settings, Coding agents takes effect immediately.
- Deleting your account deletes your pages, uploaded files, earlier versions, reminders, tokens and connections. You can delete it from your account settings, or ask us to by emailing hello@sumibako.com. Billing records held by Dodo Payments, and feedback or reports you sent us, may be kept where the law or preventing abuse requires it.
- Analytics data is kept for the period set in our Google Analytics and PostHog retention settings.
7. Cookies and Browser Storage
We use cookies to keep you signed in and to measure usage with Google Analytics and PostHog, and browser storage to hold your offline copy and your preferences. You can control cookies in your browser settings, although blocking them may sign you out.
One more cookie is set only when you type the correct passcode on a published page that is behind one. It is named sb_unlock_ followed by that page's identifier, and it holds a random key which says this browser has unlocked the page, never the passcode itself. It lasts 30 days, is sent only to published pages, cannot be read by scripts, and stops opening the page as soon as its owner changes the passcode. Without it you are asked for the passcode again.
8. Your Rights
You can see, correct and export your own information at any time, and every page can be exported as Markdown or PDF. Depending on where you live, you may also have the right to request a copy of your data, to have it corrected or deleted, to object to or restrict how we use it, and to complain to a data protection authority. Email hello@sumibako.com to exercise these rights.
9. Security
Connections to Sumibako are encrypted, API tokens are stored only as hashes, and connected apps are limited to the permissions you approved. No system is perfectly secure. Report security concerns to hello@sumibako.com.
10. Children
Sumibako is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
11. International Transfers
Your data may be processed or stored in countries outside your own. We take steps to ensure adequate protection of your data when transferred internationally.
12. Changes to This Policy
When we change this policy we update the date at the top of this page. If a change affects how we use information you have already given us, we will tell account holders before it takes effect.
13. Contact
If you have questions about this policy, email hello@sumibako.com.