Privacy

Last updated 24 October 2026.

Jot does not collect, send, sell or share your notes or anything about you. There is no Jot server, no account, no analytics and no advertising.

Your notes

Notes are stored in your browser's own database (IndexedDB) on the device you use, and nowhere else. Notes in the main list are stored as plain text: anyone who can use your unlocked device and browser can open them, as with any other app.

Locked notes

Notes in the Locked tab are encrypted on the device with AES-256-GCM before they are stored. The key comes from your password through PBKDF2-SHA-256 with 600,000 rounds; the password itself is never stored or sent anywhere. Nobody, including the maker of Jot, can open them without it, and there is no way to reset it. In an export they stay encrypted.

Settings

A few settings that hold nothing personal are kept in local storage: the theme, the text size, the sort order and how soon Locked closes. The full list is on the cookies page.

Hosting

The website and app files are served by GitHub Pages. Like any web host, GitHub may log the IP address and browser of visitors. See the GitHub privacy statement. After the first visit, the app runs from your device's own copy. The website (not the app) asks GitHub's public API for the star count of the Jot repository.

Exports

An export is a JSON file saved where you choose. Your main notes are plain text in it, so anyone who gets the file can read those; locked notes stay encrypted. Keep it somewhere safe.

Changes and questions

Any change to this policy is published here and in the source history. Questions are welcome as an issue on GitHub.