ask away!
there are some different storage and security model details between devices, but in general "the browser is always storing it locally" - even if different devices or OSes prompt for approval and whatnot in different ways. "service workers" is the thing you'd want to talk to AI about.
There's literally nowhere else for the data to be - if you haven't signed up for sync, there's nothing of yours on a server anywhere. your browser loaded the client code and is doing everything on-device. (you could prove this to yourself by opening the site on a new browser and killing your network connection. then write some stuff and refresh. it'll still be there).
on privacy: if you use sync, the data is encrypted client-side using a nostr keypair (doesn't have to be your real npub). only the holder of that nsec can decrypt the data. but yes: a security review by an agent would make you feel better.
If you get a good report before me, I'd be happy to add it to the docs!
vinney...axkl
npub19m…8axkl
2026-10-07 17:57:04 UTC
in reply to nevent1q…kj32
Author Public Key
npub19ma2w9dmk3kat0nt0k5dwuqzvmg3va9ezwup0zkakhpwv0vcwvcsg8axklPublished at
2026-10-07 17:57:04 UTCEvent JSON
{
"id": "deb12e739636bf0e96dbf654984339ab858162e5dd8c36ce06a5ba2286416c92",
"pubkey": "2efaa715bbb46dd5be6b7da8d7700266d11674b913b8178addb5c2e63d987331",
"created_at": 1791395824,
"kind": 1,
"tags": [
[
"e",
"d9d9129024c13bd238584cd227cc972659a01e277595a3690c5e94947125f7d8",
"wss://relay.primal.net",
"root",
"2efaa715bbb46dd5be6b7da8d7700266d11674b913b8178addb5c2e63d987331"
],
[
"e",
"68f12d6833ce71507e6fb7886d0e930593d813192fbe493ccc9b35432c330405",
"wss://relay.primal.net/",
"reply",
"d28413712171c33e117d4bd0930ac05b2c51b30eb3021ef8d4f1233f02c90a2b"
],
[
"p",
"d28413712171c33e117d4bd0930ac05b2c51b30eb3021ef8d4f1233f02c90a2b"
]
],
"content": "ask away!\n\nthere are some different storage and security model details between devices, but in general \"the browser is always storing it locally\" - even if different devices or OSes prompt for approval and whatnot in different ways. \"service workers\" is the thing you'd want to talk to AI about.\n \nThere's literally nowhere else for the data to be - if you haven't signed up for sync, there's nothing of yours on a server anywhere. your browser loaded the client code and is doing everything on-device. (you could prove this to yourself by opening the site on a new browser and killing your network connection. then write some stuff and refresh. it'll still be there).\n\non privacy: if you use sync, the data is encrypted client-side using a nostr keypair (doesn't have to be your real npub). only the holder of that nsec can decrypt the data. but yes: a security review by an agent would make you feel better. \nIf you get a good report before me, I'd be happy to add it to the docs!",
"sig": "8e531e24a5e38359a28d8cfccb7578b3ff9f24251a9d8a78b5e4ef7ed37e04cd9c9a0e88487fb488ce3e1c8ce2f4eac2e35e8110eeb564b683ad64457aec081b"
}