Wonder
Draft for legal review. Nothing here is final until this notice is gone; items in [brackets] are still to be decided.
Cookies and storage.
One cookie, strictly needed, and no tracking of any kind: no analytics, no advertising, no third-party cookies.
Cookies
| Name | What for | How long |
|---|---|---|
manifesto_session | Keeps you signed in on the website and web app. HttpOnly, so scripts can’t read it, and sent only to Wonder. | 30 days after you last use it, or until you sign out |
manifesto_mac_sso | Only while you sign in to the Mac app with Google, Apple or GitHub: carries the sign-in back to the app. | Minutes, deleted once used |
Both are needed for the service you asked for, so there’s nothing to consent to and no banner.
What the web app keeps in your browser
- Your journal and settings, in local storage, so it works offline and opens quickly.
- Your journal’s key, locked so that only this browser can use it, in IndexedDB. Signing this browser out from another device, or deleting your account, erases it.
- Where sync has got to, so it only sends what’s changed.
- If you’ve turned on usage counts, which ones were sent today, so each goes at most once a day.
This is on your device, not ours. Clearing your browser’s site data removes it; anything not yet synced goes with it.
The Mac app
Keeps your journal in its own folder on your Mac, and your sign-in token and key encrypted with a key held in the macOS Keychain. It sets no cookies.
Fonts
The website’s typefaces load from Google Fonts, which sees your IP address and browser when a page loads, under Google’s own privacy policy. It sets no cookies. [We plan to host the fonts ourselves.]
Last updated [date of publication].