What is stored

• Your email address, to identify your account when you sign in.
• A hash of your password. The password itself is never stored.
• Your documents and folders, including titles, content and when they were changed.
• Images you paste, drop or upload into a document.
• Earlier versions of your documents (version history), so you can restore them. Old automatic versions are thinned out over time.
• Sessions: sign-in tokens with an expiry date, so you stay signed in.

Everything is stored with Supabase (database, sign-in and image storage) in the EU (Ireland). Supabase also sends the emails for confirming your address and resetting your password.

Your documents are private to your account. A document is only visible to others if you create a read-only share link for it, and you can turn that link off again.

Cookies

Hashlite sets no cookies. There is no tracking, no analytics, no advertising and no third-party script, so no cookie banner is needed.

Storage in your browser

The editor uses your browser's local storage for three things: your sign-in session, an unsaved draft of the document you are editing, so nothing is lost if your connection drops, and your preferences, such as the theme and the layout. This data stays on your device and is removed when you clear your browser's site data.

Export and delete your data

Open the Account dialog in the editor to:

• Download all documents as a .zip of Markdown files, with your folders kept.
• Change your password, or reset it by email from the sign-in screen.
• Delete your account. This permanently removes your account, documents, folders, images and versions.

You can also export a single document as Markdown, HTML or PDF from the document's menu.

Your own copy

Hashlite is open source. If you run your own copy with your own Supabase project, you are the data controller for it and decide where it is hosted and how it is backed up.

Changes

If this page changes, the new version will be published here. Questions? Contact the operator of this Hashlite instance.