Your privacy

Last updated: 27 October 2026

Jar of Light is a private journal. Here is, in plain words, who can see what and how we protect it.

Only you see your entries

Every entry, category and profile setting is tied to your account. The database itself checks every request with row-level security, so another account can't read or change your data, even through a bug in the app.

What we store

Your name and email from Google, your interface language and time zone, and the entries and categories you create. We don't store your Google password and never see it. Nothing is published or shared: there are no public features yet.

Who else has technical access

The operator of the service (the author of this project) technically has access to the database to keep it running and does not read entries. Entries are encrypted in transit and at rest by our providers, but not end-to-end: end-to-end encryption would make future features such as search and summaries impossible, so we chose strict access rules instead.

Where the data lives

The app runs on Vercel, and the database on Supabase in the United States (Ohio). Sign-in uses Google. There is no advertising and no analytics in this version.

Backups

To protect your journal from loss, we make nightly encrypted backups and keep each one for 30 days.

Deleting your data

You can delete any entry, or your whole account, in the app at any time. Deletion is immediate; copies in encrypted backups disappear within 30 days.

Questions

Write to the author through the project's GitHub page.