1. Who handles your data
HashDashDot is for people aged 19 and over who have reached the age of majority where they live. If you believe we hold personal data about someone who does not meet these requirements, contact support@hashdashdot.app so we can review and take appropriate action.
Moruna operates HashDashDot and handles its account and journal data. Send access, correction, deletion, restriction, or other privacy requests to support@hashdashdot.app.
2. Data and purposes
To record your declaration that you meet the adult eligibility requirements, we store your account identifier, the declaration version, and the most recent confirmation time after successful email verification. We do not collect your date of birth or identity documents for this declaration, and it does not verify your actual age. The declaration record is deleted with your account information after the 30-day account deletion grace period.
For sign-up and login, we process your email, account identifier, verification-code validation data, and sessions to send login emails and protect access. Legacy accounts may retain a one-way password hash, which is no longer used for login.
We store and provide your document titles and text, dates, tasks, calendar entries, habits, and language and font preferences across devices. Support requests include your email and the information you send.
For billing, we send your email and an account-linked checkout reference to Paddle and receive customer, transaction, and subscription identifiers, subscription status, and billing periods to manage access. HashDashDot servers do not store card numbers or security codes.
Technical information such as your IP address is used for connections and security. Login rate limits use hashes derived from IP addresses or emails and request timestamps. Journal content and credentials are not written to ordinary application access logs.
3. Cookies and storage on your device
An essential session cookie keeps you signed in for up to 30 days; logout revokes that session. Browser storage may contain language and display preferences, entries viewed on this device, unsent edits and conflict copies separated by account for offline use. Unsent edits remain on this device after session expiry until you sign in to the same account again. Clearing browser data may erase entries that have not reached the server.
To show previously opened documents while loading, we also keep a limited, account-separated preview cache of document titles and text on your device. Previews are read-only until checked against the server. This cache is removed when you sign out, when the app detects an expired session, or when you request account deletion on this device.
The current HashDashDot web code includes no advertising trackers or visitor analytics tools. When you open checkout, Paddle processes payment and fraud-prevention information under its own policies.
4. Providers and connected services
| Provider and contact | Processing details |
|---|---|
| Vultr | Hosting, storage, and backups: account and authentication data and journal records. Seoul, South Korea. Data is sent over HTTPS during sign-up, sign-in, saving, and retrieval. Account, record, and backup retention and deletion follow section 5. |
| Cloudflare, Inc. Email Sending |
Sign-in and account-deletion emails: email address, subject, verification-code message, and delivery information. Journal text is not included. Published locations: the United States, the European Economic Area, and other locations under the provider’s general policy. Email Sending-specific countries are being confirmed. Sent over encrypted SMTP when a code is requested. Message previews are retained for about seven days; delivery and suppression records follow separate provider retention rules. |
| Google Workspace Google Asia Pacific Pte. Ltd. (standard terms for South Korean billing addresses) 70 Pasir Panjang Road, #03-71, Mapletree Business City II, Singapore 117371 Data processing terms · Processing locations |
Support inbox and replies: sender and recipient addresses, message contents, attachments, and delivery information. Locations: countries in the published subprocessor list, including the United States, Singapore, Taiwan, and Japan. Storage is not restricted to a single country. Transferred by email when inquiries and replies are sent. General inquiries are deleted when no longer needed; statutory dispute evidence is retained for three years. Recovery and system-deletion periods are described in section 5. |
| Paddle South Korean buyers: Paddle.com Market Limited |
When paid subscriptions are available: payment and subscription management using email, a random checkout reference, product, currency, transaction, and subscription data. Journal titles and text are not sent. Processed through HTTPS APIs, checkout, and webhooks during checkout and subscription management. As Merchant of Record, Paddle also handles payment data it collects under its own policy. The entity is based in the UK; processing locations follow Paddle’s international-transfer policy. Its records are retained according to the transaction relationship and legal obligations and are not automatically deleted with a HashDashDot account. |
hashdashdot.app uses Cloudflare in DNS-only mode. DNS and the email sending service above serve separate purposes.
Send privacy, international-transfer, and refusal requests to support@hashdashdot.app. If you refuse verification-email processing, we cannot provide sign-up or sign-in. You can use free journal features without emailing support or using paid checkout. Deletion and statutory retention of existing records follow section 5.
If you authorize an external app through MCP, it can read your currently saved records but cannot modify them. You can revoke access in connection settings; data already received by that app remains subject to its policies.
5. Retention and deletion
Accounts and journal records
We retain account data and saved records while providing your account with the service. Previously deleted custom documents are retained for 30 days after deletion, then their titles, contents, and associated legacy history are removed. The app does not currently offer a trash or restore screen.
You can request account deletion in Settings after verifying a separate code sent to your account email. You will be signed out on all devices and MCP connections will be revoked immediately. Your account information and journal records are retained for a 30-day grace period, then deleted. Verify your email again within those 30 days to explicitly cancel deletion. This does not restore old sessions or MCP permissions. You must wait until any subscription has fully ended before requesting deletion.
Accounts, deleted documents, and expired billing information are cleaned up at service startup and hourly. Deletion takes place during the next successful cleanup after expiry, so it may not occur at the exact expiry time. Failed cleanup is retried and investigated by the operator. Existing backup copies follow the backup rules below.
Support emails
We delete general support inquiries without undue delay once our response is complete and the information is no longer needed. Consumer complaint or dispute-handling records subject to statutory retention are managed separately for three years from completion of handling, then deleted. Account deletion does not restart that period. We retain only necessary evidence and delete unnecessary journal text and screenshots after resolution. The same rules apply to received messages, replies, quoted originals, attachments, and separately saved copies.
Our deletion procedure includes permanently deleting eligible emails from Google Workspace Gmail Trash. Messages otherwise remain in Trash for up to 30 days, and administrators may restore them for up to 25 days after removal from Trash. Google’s system deletion process and applicable legal holds are separate. The applicable Workspace data processing addendum provides for system deletion within a maximum of 180 days after a deletion instruction that the customer cannot reverse, subject to legal storage exceptions. This is not a uniform retention period measured from the resolution of an inquiry.
Billing records
We retain only necessary evidence separately from journal records for contracts, withdrawal, payment, and service supply records subject to five-year statutory retention. We calculate the period from the later of payment completion and the end of the relevant service period for payment and supply evidence, from contract termination for contract summaries, and from the finalized action for cancellation and refund evidence. Account deletion does not change these starting points. Records are deleted after expiry. Journal text, card numbers, and security codes are not included in this evidence.
Temporary checkout references that did not result in a purchase are used for reconciliation for 90 days after confirming cancellation with no billing or captured payment, then deleted. Temporary references for completed checkouts are also removed 90 days after completion is confirmed, once necessary evidence and subscription links are in place. Webhook event identifiers used to prevent duplicate processing are retained for 90 days from processing. Customer and subscription links are kept while needed for account subscription management and removed after permanent account deletion once outstanding transactions are resolved and necessary evidence is available.
If a transaction or refund is unresolved or evidence is missing, we hold the necessary records for review. We track the reason and next review date and reassess expiry using the original starting point after resolution. Paddle’s own payment records follow its privacy policy; HashDashDot cleanup does not delete those records.
Backup copies
Deployment backups on our server are retained for 30 days from creation, with expired files cleaned up hourly. Separately, Vultr automatic backups are scheduled every Friday at 16:00 UTC and retain the two most recent copies. With normal weekly rotation, each Vultr copy remains for about 14 days. We do not use separately created snapshots.
Vultr’s full-server backups may also contain deployment backups. Data deleted from the service database can therefore remain through the 30-day internal backup retention and roughly 14-day external backup rotation. Thirty days is not a deletion limit for all copies. The 30-day account grace period or deleted-document retention is separate from this rotation. Cleanup or rotation failures may extend residual retention and require operator action.
Backup access is restricted to personnel who need it for recovery and security. Before resuming service after restoration, we reapply expiry rules and deletion requests made after the backup was created. Restoration does not restart existing retention periods.
Authentication data and data on your device
Verification codes expire after 10 minutes; successful use deletes their validation data. Expired codes are cleaned up on subsequent code requests, and login rate-limit records older than 15 minutes are cleaned up on relevant authentication requests. Login sessions are valid for 30 days and deleted on logout; expired session records are cleaned up when a new session is created. Expiry and deletion of stored records may occur at different times.
Drafts and settings on your device are managed separately in browser storage. Server-side account deletion does not remotely erase storage on every device or files you have exported. On shared devices, sign out and clear the site’s stored data.
6. Your requests and safeguards
You may request access, correction, deletion, or restricted processing by email. We may verify account ownership to protect other people’s data. We cannot provide an account without processing the email needed to access it.
We use HTTPS, account-scoped access controls, hashed credentials, and restricted server access. Records are processed on the service’s servers; this is not an end-to-end encrypted service. Report suspected security incidents to support@hashdashdot.app.
7. Policy updates
We will update this page and its revision date when this policy changes and notify you of material changes through the service or email.