What is kept, and where¶
In short. Almost everything stays with you: in your browser, or in files on your computer. A few things reach our server, and they are all listed here.
In your browser¶
Kept in this browser only. Another browser or computer doesn't see it, and clearing the browser's site data removes it.
| what | which desk |
|---|---|
| your drafts, one per text, with their readings and notes | Words |
| your saves and gems, exactly as written | Words |
| your list of traces and their results | Record |
| your signing key (the private half can't be read out, even by the page) | both |
| small settings: drawer widths, whether the eye is open, where Save goes | both |
| which file on your computer Save writes over (the browser's pointer to it, never its contents) | Words |
| the Google Drive folder and the two Drive files Save writes over (their IDs, never their contents) | Words |
| Google's one-hour sign-in for Drive, in that tab only; gone when the tab closes | Words |
On your computer¶
Only the files you choose to save: traces (Record), saves and gems (Words). They are yours. Desk can open them again.
In your Google Drive¶
Only if you choose Drive on Words: your save (.json) and your draft (.md), in the folder you choose.
Your browser writes them to Google directly; Habitat's server never sees them. Desk can see only the files it makes
in your Drive, nothing else there.
Sent to the server, and not kept¶
Nothing below leaves your browser before you log in to Desk, except your browser's DID when Record checks it.
| what | when |
|---|---|
| a paragraph's text | when you read it on Words; the server reads it, answers, and keeps nothing |
| your search words, and the positions of your recent reads (never their words) | when you search a text in the drawer |
| your browser's DID | when Desk checks whether your browser's key belongs to a member |
Sent to the server, and kept¶
| what | when | who can see it |
|---|---|---|
| a remark, your name and DID, where in the paragraph it was made, a fingerprint (SHA-256) of the words it was made on (never the words), and the server's reading of the remark (its positions, not more words) | when you post in a room | the room's writer and the members they invited |
| your paragraphs as they stand, shared with your room | when you click Invite | you and the members who joined with your link, until you remove them or end the share; an ended share is kept, sealed, and never served again |
| who joined your share, whom you removed, and whom you let back in | when a member opens your link; when you remove one or let one back in | you |
| the room's list of who may post | when the writer sets it | the room's writer and the members they invited |
| a gem: the shape of your reading, signed, with no words | when you give it to a room's Gem-Space | names and DIDs to the room's members; totals to anyone |
| your membership grant and the DIDs bound to it | when the Foundation grants membership | used to check signatures |
| an older Desk identity's ID and key, once | when a member's browser links its earlier Desk identity | used to keep earlier remarks yours |
Sent to us by form¶
| what | when |
|---|---|
| your name, an email if you give one, and your browser's DID | when you request membership |
| your email and message | when you use "Contact us" on the password page |
| your email and the kit you asked for, with a record of the link sent | when you request a kit |
These arrive with us, and we answer by hand.
Page views¶
habitat.ooo and these pages count page views with their own analytics on our web host: country, region and city as the host estimates them, and the page. No cookies, no third-party tracker, and never the IP address.
Never sent¶
The files you check on Record. Your notes. Your draft, apart from each paragraph you read (which is read and not kept) and the paragraphs you share by inviting. The contents of your saves and gems, unless you hand them to someone yourself.
Good to know. Habitat serves no one's words except by the writer's own act, and only to the people that act names. A room's link opens it only for members, and the writer can remove a reader at any time. Remarks are kept for good: there is no delete in a room. That is deliberate, and it is why the words your remark is on are shown to you before you post.