privacy
What selfalign keeps, and where
selfalign is a personal, invite-only tool run by one person on one server. There is no analytics, no advertising, no tracking, and nothing is sold or shared. This page says exactly what is stored, so it can be checked against the code.
Two ways to use the board
Signed in with Google. Your journal is kept on the server, in a folder that belongs to your account, so the same day is on every browser you sign in from.
"Just this browser." No account, no cookie, nothing on the server: the journal lives in that browser's local storage and never leaves the device. Clearing the site's data erases it.
What is stored for a signed-in account
| What | Why | Where, how long |
|---|---|---|
Your Google account id (sub), email, display name and picture URL — from
the ID token Google hands the page when you sign in; nothing else from your Google
account is requested or read. |
The id is what names your folder (it is stable and never reused); the rest is shown in Settings so you can see who is signed in. | In your account's folder, until you ask for the account to be removed. |
| Your journal: everything you put on the board — intentions, contexts, notes, timers, outcomes and verdicts, the times they happened. | It is the product. | Plain JSON-lines files in your account's folder on the server's disk. Kept until you ask for it to be deleted; you can export it at any time from Settings, or have the files themselves. |
| A session record: a hash of your session token, your account id and email, an expiry. | So the server knows which folder a request belongs to. | 30 days, or until you sign out (which deletes it). Signing in again replaces it. |
| Optionally, tokens you give the app for Notion or intend.do. | So the server can pull your contexts and your past intentions on your behalf — read-only; nothing is ever written back to either service. | A file only your account's process can read, in your folder; delete it and the pull stops. |
Cookies
__Host-sa_session— the session, set only after you sign in. HttpOnly (page scripts cannot read it), Secure, sent to this site only and never on cross-site requests. Expires after 30 days.- A short-lived nonce cookie for the ten minutes it takes to sign in, so a Google token minted for one browser cannot be replayed in another.
- Nothing else. This page and the other public pages set no cookies at all.
Third parties
- Google Identity Services — the "Continue with Google" button — is loaded only on the sign-in screen, never in "just this browser" mode. Google's own privacy policy applies to the sign-in itself.
- Google Fonts serves the typefaces on every page, which tells Google your IP address and browser the way any font host would.
- Notion and intend.do are contacted by the server only if you have given it a token, and only to read.
No other script or resource is allowed to load: the page's Content-Security-Policy names exactly these.
Server logs
The web server keeps ordinary access logs — IP address, requested URL, browser identification, time — rotated daily and deleted after 14 days. The application's own log records that requests happened and whether they succeeded, never what you wrote.
Where the server is, and who can see the disk
One machine, hosted by Hetzner in Germany, operated by the person who builds selfalign. Journals are stored as plain files, protected by the operating system's permissions, not by client-side encryption: the operator can technically read them, and does not. Full-disk encryption on the host and the closed sign-in list are the honest baseline today.
Your data, your call
- Export — Settings → Export state as JSON; or ask for the journal files, which are the export.
- Sign out — from Settings, on any device; that revokes the session on the server too.
- Delete — ask, and the account's folder is removed and its session revoked. Nothing else about you remains.
selfalign is invite-only: everyone with an account knows the operator directly, and that is the way to ask.
Updated August 2026.