Privacy Policy

Last updated: February 2026

1. What We Collect

Casey collects only what is necessary to provide the service:

  • Account information: Username and hashed password (we never store your password in plain text)
  • Content you create: Journal entries, tasks, blips, and tags
  • Usage metadata: Timestamps for when content is created or modified, blip surface counts
  • Preferences: Your chosen settings (theme, daily blip count)

2. What We Don't Collect

  • No email addresses (unless you choose to add one in the future)
  • No analytics or tracking scripts
  • No third-party cookies
  • No advertising identifiers
  • No location data

3. How We Use Your Data

Your data is used solely to provide Casey's features to you. We do not:

  • Sell your data to third parties
  • Use your data for advertising
  • Share your data with other users
  • Train machine learning models on your content

4. Data Storage and Security

Your data is stored in an encrypted database on servers we control. We use industry-standard security measures including:

  • Password hashing with secure algorithms
  • CSRF protection on all forms
  • HTTPS for all connections
  • Secure, HTTP-only session cookies
  • Rate limiting on authentication endpoints

5. Your Rights

You have full control over your data:

  • Access: View all your data through the app at any time
  • Export: Download all your data in JSON or CSV format from Settings
  • Delete: Permanently delete your account and all data from Settings
  • Modify: Edit or delete any individual entry, task, or blip

6. Data Retention

Your data is retained for as long as your account is active. When you delete your account, all associated data is permanently and immediately removed from our database.

7. Cookies

Casey uses a single session cookie to keep you logged in. This cookie is:

  • HTTP-only (not accessible to JavaScript)
  • Secure (only sent over HTTPS in production)
  • Same-site restricted (not sent with cross-origin requests)

A theme preference is stored in your browser's local storage (not a cookie) to remember your light/dark mode choice.

8. Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Last updated" date above.

9. Contact

Questions about your privacy? Open an issue on GitHub.