Privacy Policy

Your reef's content — memos, attachments, member accounts, settings — stored so we can host it for you. That's the product, and it's the only reason we have it.

Billing details are handled entirely by Stripe: your card number never reaches our servers. We keep only Stripe's identifiers for your subscription so we know which reef is paid for.

Server logs (IP addresses, request paths, timestamps) for keeping the service healthy and abuse at bay, kept briefly and not mined for anything.

We don't read your memos except when strictly required to operate the service (a support request from you, an abuse report, a legal obligation). We don't sell or share your data, run ads, use third-party analytics trackers, or train AI models on your reef.

One session cookie, on your reef's own subdomain, to keep you signed in. No tracking cookies. This marketing site sets none at all.

Each reef is an isolated database — reefs cannot see each other. Nightly encrypted backups are kept off the primary server. When a subscription ends, data is retained for 90 days (so you can come back or export), then permanently deleted, backups included on their rotation schedule.

Export your data anytime. Delete your reef anytime (cancel, then ask — or just let the 90 days run). Ask us what we hold about you and we'll tell you plainly. Reach us via GitHub Discussions.