What is stored

• Your email address, to identify your account when you sign in.
• A hash of your password. The password itself is never stored.
• Your documents and folders, including titles, content and when they were changed.
• Images you paste, drop or upload into a document.
• Earlier versions of your documents (version history), so you can restore them. Old automatic versions are thinned out over time.
• Sessions: sign-in tokens with an expiry date, so you stay signed in.

Everything is stored with Supabase (database, sign-in and image storage) in the EU (Ireland). Supabase also sends the emails for confirming your address and resetting your password.

Your documents are private to your account. A document is only visible to others if you create a read-only share link for it, and you can turn that link off again.

Cookies

Hashlite asks before it sets any cookie that isn't needed for the site to work. On your first visit, a banner asks whether you allow analytics cookies. If you choose Decline, or don't answer, no analytics script is loaded and no analytics cookie is set.

If you choose Allow, Hashlite loads Google Analytics (Google Ireland Ltd.), which sets cookies (_ga, _ga_*) to count visits and see which pages are used. Hashlite sends only the page address without anything after ? or #, never the content of your documents, and never the token of a share link. Google signals and ad personalisation are turned off. Google may process this data outside the EU; see Google's privacy policy.

Cookie settings Choosing Decline later stops analytics and removes its cookies.

There is no advertising, and there are no other third-party scripts.

The connector for AI assistants

If you add Hashlite as a connector in an AI assistant (see Connect), the assistant sends the document it wants to open to Hashlite's server, which turns it into a link and sends it back. The text is not stored or logged, and the connector needs no account.

The documents connector works only after you sign in and choose Allow. The assistant can then search, read, create and update your documents and create share links, as described on the consent screen. Hashlite stores the app's name, when you connected it and when it was last used, and a fingerprint (hash) of its access keys, never the keys themselves. Documents the assistant reads are sent to that assistant and handled under its own privacy terms. Disconnect at any time under Account › Connected apps; deleting your account removes all connections.

Storage in your browser

Hashlite uses your browser's local storage for: your sign-in session; an unsaved draft of the document you are editing, so nothing is lost if your connection drops; the text you type in the editor on the home page, until you save it to an account; your preferences, such as the theme and the layout; and your answer to the cookie question. This data stays on your device and is removed when you clear your browser's site data.

Export and delete your data

Open the Account dialog in the editor to:

• Download all documents as a .zip of Markdown files, with your folders kept.
• Change your password, or reset it by email from the sign-in screen.
• Delete your account. This permanently removes your account, documents, folders, images and versions.

You can also export a single document as Markdown, HTML or PDF from the document's menu.

Changes

If this page changes, the new version will be published here. Questions? Contact the operator of this Hashlite instance.