Privacy
What each app keeps, who can read it, and how to have it removed. Checked against each app's data rules and code.
The short version
- No ads, no tracking pixels, no third-party trackers or cookies, and nothing sold, in any app or on this site. The hosting counts visits; see Analytics below.
- We do not sell or share what you make.
- No account to start: each app makes a guest account in your browser.
- Things you make are reached through their links. Where something is public, the table below says so.
App by app
| App | What it keeps | Who can read it |
|---|---|---|
| Sign | The document (your PDF or text), the signers' names and any emails you add, each signature, when each signer opened and signed, and the signer's browser name for the audit trail. | You, through the admin link, and each signer, through their own link. |
| Forms | The form and every response. | Anyone with the form's link sees the questions. Only you, through the admin link, see the responses. |
| Split | The group's name, the names of the people in it, its expenses and the money settled between them. | Anyone with the group's link, so everyone in the group can add to it. |
| Links | The long address, how many times the short link was opened, and whether it is on. Nothing about the people who open it. | Anyone who opens the short link is sent to the address. Only you, through the edit link, see the count. |
| When | The poll's times, place and note, and each person's name and answers. | Anyone with the poll's link. |
| Nothing. Files are opened and changed in your browser and never uploaded. | Only you. | |
| Invoice | Nothing, until you share an invoice by link. Then the names, addresses and tax ID on it, its lines and totals, notes, payment instructions, and whether it was settled. | Anyone with the invoice's link can read it. Only you, through the admin link, can change it. |
| Bio | Your page (name, bio, photo, links and social profiles), how many times it was viewed, and how many times each link was clicked. | The page and its view count are public. Only you, through the edit link, see clicks per link. |
| Book | Your page (name, hours, questions), your meeting link, and each booking: the time and the name, email, note and answers of the person who booked. | Your page and which times are taken are public. Your meeting link goes only to you and the people who book. A booking is seen only by you and the person who made it. |
| Dictate | Nothing. Speech becomes text in your browser. The speech model downloads once, from Hugging Face and jsDelivr. | Only you. |
| Images | Nothing. Images are compressed and cut out in your browser. The background model downloads once, from Hugging Face and jsDelivr. | Only you. |
| Resume | Nothing, until you share a resume by link. Then everything on the resume. | Anyone with the resume's link can read it. Only you, through the admin link, can change it. |
| Sheets | The sheet and its slots, and each sign-up: the name, the email if given, the note, and answers to the organizer's questions. | Anyone with the sheet's link sees the slots, the names shown and the notes. Emails and answers are seen only by the organizer and the person who signed up. |
| Paste | The text you paste. A paste encrypted in the browser is stored scrambled, and its key stays in the link, out of our reach. | Anyone with the link, until the paste expires or, for a read-once paste, until it is opened. |
| Record | Nothing. Recordings stay in your browser until you delete them. | Only you. |
| Lingo | Your lesson progress, and this week's league entry: a display name (a random one unless you change it), your course language and your XP. | Your progress: only you. The league entry: anyone using Lingo. |
| Still | How many minutes you practiced and how many sessions, per day. How you felt at check-ins stays on your device. | Only you. |
| Monitor | A room for your phones: its name, each phone's name, and the network details the phones swap to connect. Video and sound go straight between the phones and never reach our servers. | Only the phones that joined the room. |
| Cards | Your card sets and your study progress. | A set: anyone with its link. Your progress: only you. |
| Budget | Your budget: accounts, categories, amounts and the transactions you enter. Budget does not connect to banks. | Only the people you invite to the budget. |
| Baby | Your family's log: the babies' names and birth dates, and each feed, sleep, diaper and other entry, with who logged it. | Only the people who joined with your family link. |
| Habits | Your habits and check-ins. For a habit you share: its name and schedule, and each member's name and streak. | Your habits: only you. A shared habit: the people who joined it by its link. |
| Polls | Your event's polls, each vote, and audience questions with an optional name. | Anyone who joined the event with its code or link sees the polls and the questions the host shows. Each vote is seen only by the voter and the host. |
| Meet | The meeting's name and settings, the name each person types to join or to ask to join, and the network details the browsers swap to connect. Video, sound and chat go straight between people and never reach our servers. | Anyone with the link sees the meeting's name. People in the call see each other's names, and hosts see who is asking to join. Pressing Leave takes your name off; the meeting itself is never deleted. |
| Tasks | Your boards: lists, cards (title, description, due date, labels, checklist), comments, and the names people give themselves on the board. | Anyone with the board's link. Anyone on it can delete archived cards and their own comments; the owner, through the admin link, can delete the whole board. A name the owner removes stays stored, marked removed. |
| Status | Your status page: the product's name, description and website, its components and their status, and each incident and maintenance with its updates. | Everyone: the page, its feeds and its badge are public. Only you, through the admin link, can change it or delete components and incidents. The page itself cannot be deleted yet. |
| Feedback | Your board, each idea and comment with the name its writer adds, if any, and each vote. | Anyone with the board's link, except hidden ideas, which only their writer and you see. A vote shows no name, but is tied to the same account as its voter's ideas and comments. Only you, through the admin link, can delete ideas and comments. |
| Lists | Your list's name, its items with quantities and notes, items it has had before (for suggestions), and the name each person adds, if any. A copy stays on your device so the list works offline. | Only the people who joined with the list's share link, and assistants given its key. Deleting the list erases its items and suggestions; its name and the people's names stay stored, marked deleted. |
| Time | Your workspace: your name, rate and time zone, your clients, projects, tags and time entries. For a project shared by link, each teammate's name and a copy of the time they log to it. | Only you, and assistants you give a key. Teammates on a shared project see its owner's name; the owner sees each teammate's name and time, and keeps that time after they leave. The workspace cannot be deleted yet. |
| Drop | While you share: whether sharing is on, the kind of each device in it (such as iPhone), the 6-digit code, and the network details the devices swap to connect. Files, their names and sizes go straight between devices and never reach our servers. | Only the devices that joined with the link, QR code or 6-digit code. Stopping sharing deletes the code and the network details; the share and the kinds of devices in it stay stored, marked closed. |
| Canvas | Your board: its shapes, drawings, notes and text, and the images you add. While you are on a board, your pointer and the name you type are shown live to others and not saved. | Anyone with the view link while it is on; editing needs the edit link. Erased drawings stay stored until you, through the admin link, delete the board, which removes everything on it. |
| Santa | The exchange (name, budget, date, notes), each person's name, any email or phone number added for them, who gives to whom, wish lists, the questions Santas ask without their name and the answers, and when each person's page was opened. | Anyone with the join link sees the names, when each page was opened and, after the reveal date, who gives to whom. Before that, each person sees only their own match, and the organizer sees them all only if they chose to before the draw. Wish lists and questions: the person and their Santa. Contacts: the organizer and whoever added them. |
| Subs | Your subscriptions (name, website, price, billing cycle, renewal date, category, payment label, notes) and your settings. A copy stays on your device so Subs works offline. | Only you. A deleted subscription leaves a marker with its renewal date but no name, price or notes, so your other devices delete it too. |
| Lift | Your workouts with every set and note, your routines, your own exercises, your body weight log and your settings. A copy stays on your device so Lift works offline. A shared routine travels inside its link. | Only you, and whoever opens a routine link you share. A deleted workout keeps its date and times, a deleted routine its name and note, and a deleted exercise of your own stays stored, marked deleted. |
Requests and app submissions sent on this site are public, including any contact you add to a submission.
Apps that keep nothing on our servers
PDF, Images, Dictate and Record do their work in your browser. Invoice and Resume keep nothing until you choose to share something by link. Dictate and Images download their AI model once, from Hugging Face and jsDelivr; your audio and images stay on your device.
Monitor, Meet and Drop send video, sound and files straight between devices, peer to peer. To find each other, the devices ask public STUN servers run by Google and Cloudflare for their network address, and swap those addresses through our servers to connect. Those servers, and ours, never see the video, sound or files.
Lingo's speaking exercises use your browser's own speech recognition. Some browsers, Chrome among them, send your voice to their maker's servers to turn it into text. Lingo keeps none of it, and the exercises only appear where the browser offers speech recognition.
Guest accounts
The first time you use an app, it makes a guest account: a random id, with its session kept in your browser's storage for that app. There is no name, email or password. If you clear your browser's storage, that browser loses the guest account; anything you shared stays reachable through its links, and admin links still work.
Lingo, Cards, Budget, Baby, Habits, Feedback, Time, Subs and Lift also let you sign in with an email address, if you want your things on more than one device. Then the sign-in service keeps your email address and emails you a code to sign in. Nothing else is done with it.
Analytics and tracking
There are no ads, no third-party trackers and nothing is sold. The apps and this site load their fonts and images from their own addresses. OpenApps hosting counts visits for each app: the pages viewed, a random visitor id kept in your browser, the link that brought you (including any utm tags), page speed and errors. That count stays with OpenApps and the app's owner and is not shared with anyone else. The servers also see the usual details of each request, such as your IP address, to deliver the page.
How long things are kept, and deleting them
Things you make are kept until they are deleted. A paste can expire, after which nobody can open it, or delete itself the first time it is read.
Some things you can delete yourself: a paste in Paste, a response in Forms, a sign-up or a slot in Sheets, your practice history in Still, and recordings in Record. Deleting a budget in Budget or an entry in Baby takes it out of everyone's view, but it stays stored. Other apps let you delete things in the app, and the table above says what stays stored when you do. To have anything removed for good, email support@openapps.app with its link and we will remove it.
Changes and questions
When this page changes, the date at the top changes too. Questions about privacy: support@openapps.app.