JotBirdJotBird
Open app

Privacy Policy

Privacy Policy for JotBird

Last updated: February 2026

JotBird LLC (“we,” “our,” or “us”) provides a simple Markdown editor and publishing tool. Your privacy matters to us. We collect as little data as possible and avoid invasive tracking, profiling, or unnecessary storage. Published pages are unlisted by design. We request that search engines not index them, but cannot guarantee they won't be discovered.

This Privacy Policy explains what we collect, how we use it, and the choices you have.

1. What We Collect

We design JotBird to minimize data collection. What we collect depends on how you choose to use the service.

1.1 Information you choose to publish (anonymous use)

You may use JotBird without creating an account.

When you click Publish, we store:

  • The rendered HTML of your Markdown
  • The Markdown used to generate and update the page
  • Any images you included (uploaded or pasted)
  • A timestamp
  • A randomly generated URL slug

Published pages created without an account:

  • Are publicly accessible to anyone with the link
  • Have links that automatically expire and are deleted after 30 days
  • May be updated or deleted by republishing while the link is active

1.2 Account information (optional)

If you choose to create an account, we collect:

  • Your email address (for authentication and account access)
  • Metadata needed to associate documents with your account (such as document IDs and timestamps)

This information is stored securely using Supabase, which provides authentication and database infrastructure for JotBird.

We do not collect:

  • Profile information
  • Personal demographics
  • Usage-based behavioral profiles

Account features include:

  • Syncing published documents across devices
  • Publishing unlimited documents
  • Extended link expiration (up to 90 days, or permanent with a Pro subscription)

You may delete your account at any time. When you do, associated documents are deleted according to our retention policies.

1.3 Usage analytics (Plausible & Cloudflare)

We use Plausible Analytics, a privacy-first, cookie-free analytics platform, to understand aggregate usage.

Plausible collects only anonymous, non-personal data, including:

  • Page URLs and referrers
  • Browser type and screen size
  • Approximate country
  • No cookies
  • No cross-site tracking
  • No stored IP addresses (IPs are anonymized)

Learn more: https://plausible.io/data-policy

We also use Cloudflare's built-in analytics to monitor performance and traffic patterns (for example, request volume and geographic distribution). These metrics are aggregated and not used for advertising or profiling.

1.4 Server logs

Because JotBird is hosted behind Cloudflare, Cloudflare automatically logs:

  • IP address
  • Request URL
  • Basic browser metadata
  • Firewall and security events

We use these logs only for security, abuse prevention, and debugging. We do not combine this data with analytics or attempt to identify individual users.

1.5 App storage (local drafts)

The JotBird editor stores drafts:

  • In your browser's local storage
  • On your device only
  • Not on our servers unless you publish the document

If you clear your browser data or switch devices without an account, locally stored drafts may not persist.

1.6 Pro subscription and payment data

If you subscribe to JotBird Pro, payment processing is handled entirely by Stripe. We do not collect, store, or have access to your credit card number or other payment credentials.

We store the following subscription metadata in our database:

  • Your Stripe Customer ID and Subscription ID (opaque identifiers used to manage your subscription)
  • Subscription status (active, canceled, etc.)
  • Current billing period end date

This data is used solely to determine whether your account has Pro features enabled. It is deleted when you delete your account.

2. What We Do Not Collect

We do not collect or store:

  • Advertising identifiers
  • Tracking cookies or pixels
  • Keystroke-level editor data
  • Drafts you have not published
  • Data sold or shared with advertisers or brokers

Anonymous use requires no login and no identifying information.

3. How We Use the Data We Collect

We use the limited data we collect to:

  • Provide publishing and syncing features
  • Maintain and secure the service
  • Prevent abuse
  • Monitor service reliability and performance

We do not use collected data to:

  • Track you across websites
  • Build personal profiles
  • Target advertising
  • Sell data to third parties

4. How Published Content Works

When you publish:

  • A unique public URL is generated
  • Anyone with the link can view the page
  • You may update or delete the page while it is active

Expiration rules:

  • Anonymous publishes: URLs expire after 30 days.
  • Free account publishes: URLs expire after 90 days. Republishing renews the same URL.
  • Pro account publishes: URLs never expire. Published pages remain accessible permanently.

For anonymous and free account publishes, editing or updating content does not automatically extend expiration.

We reserve the right to remove published content that:

  • Violates copyright
  • Contains illegal or abusive material
  • Poses security risks

5. Search Engines and Sharing

Published JotBird pages are designed to be shared intentionally—not discovered accidentally.

To support this, we take the following measures:

  • Published pages include noindex metadata requesting search engines not index them
  • Images and other assets include similar directives
  • URLs are randomly generated and not linked from any public directory

Important: While we request that search engines not index published pages, we cannot guarantee compliance. Search engines may still crawl and index content despite these directives. If someone shares your link publicly (for example, on social media or a public website), it may become discoverable.

We include limited metadata (such as a page title and preview image) so links display cleanly when you intentionally share them in messages or chats. Published pages do not include analytics scripts, tracking pixels, or third-party advertising code.

This approach helps keep shared content temporary and under your control, but is not a substitute for true privacy. Do not publish sensitive information that you would not want to become public.

6. Third-Party Services

We rely on:

Cloudflare

Hosting, caching, and security

Privacy: https://www.cloudflare.com/privacypolicy/

Plausible Analytics

Anonymous usage analytics

Privacy: https://plausible.io/data-policy

Supabase

Authentication and database infrastructure used to store published content and optional account information. Supabase acts as a data processor on our behalf and does not use your content for its own purposes.

Privacy: https://supabase.com/privacy

Stripe

Payment processing for Pro subscriptions. Stripe handles all payment credentials directly. We never receive or store your card details. Stripe may collect information as described in their privacy policy.

Privacy: https://stripe.com/privacy

We do not use Google Analytics, Facebook tracking, or ad networks.

7. Data Retention

  • Anonymous published pages: URLs expire after 30 days
  • Free account published pages: URLs expire after 90 days
  • Pro account published pages: URLs do not expire and are retained until you delete them or delete your account
  • Subscription metadata: retained while your account exists; deleted when you delete your account
  • Server logs: retained by Cloudflare for security (typically ≤ 30 days)
  • Local drafts: remain on your device until you delete them

8. Deletion

When you delete a document:

  • The published HTML and Markdown are permanently deleted from our servers
  • Associated images are permanently deleted
  • The URL becomes inactive and returns a “not found” response
  • We do not retain copies or backups of deleted content

Important: Deletion is permanent and cannot be undone. We cannot recover deleted documents. If you shared a link before deletion, anyone who saved the content externally may still have a copy—deletion only removes content from our servers.

When you delete your account, all associated documents, images, and subscription data are permanently deleted. If you have an active Pro subscription, it is canceled with Stripe at the time of account deletion.

9. Children's Privacy

JotBird is not directed at children under 13 and does not knowingly collect personal data from children.

10. Your Rights

Because we collect very little personal data, many traditional data rights do not apply. However, you may always contact us to:

  • Request removal of published content
  • Delete your account
  • Ask questions about our data practices

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above.

12. Contact Us

Email: support@jotbird.com