Your writing is not our data.

What Typehere is

Typehere is a one-document Markdown editor. By default, the application code arrives from the web, but your document does not leave the browser. The document and its bounded local history are stored in IndexedDB in the browser profile you are using.

Encrypted sync is optional. When you enable it, the browser creates a random 256-bit root capability and derives separate values for the document address, encryption key, and relay authorization. The document is encrypted locally with AES-256-GCM before any document bytes leave the browser.

The boundary, at a glance

What the sync relay knows

The relay retains only what it needs to store and return an encrypted snapshot:

• the opaque encrypted envelope, up to 1 MiB;
• a derived, random-looking document identifier;
• a one-way authorization verifier;
• the exact stored byte count, integrity tag, and expiration time.

The relay is never given the root capability, the AES content key, or the plaintext. The complete access link carries the root capability after #. Browsers do not send URL fragments in HTTP requests, and Typehere removes the fragment from the visible address and history entry as soon as it captures it.

Retention and deletion

• Local data remains until you clear this site's browser data or the browser removes it.
• Synced data expires 30 days after the latest accepted document update. An identical retry does not extend that clock.
• Expired relay records are scheduled for automatic deletion and are also rejected and removed if accessed after expiry.

There is currently no account dashboard or immediate remote-delete control. Stop updating a synced document and its relay record will age out. Clearing browser data removes the local document and capability, but does not accelerate the relay's 30-day expiry.

Infrastructure data

Typehere does not add analytics or advertising trackers. Like nearly every website, its infrastructure providers may still receive ordinary request data such as IP address, timestamps, browser or device details, request paths, security signals, and coarse location derived from IP. They process and retain that information under their own policies.

• Vercelserves the editor and may process website request and log data. See Vercel's Privacy Notice.
• Cloudflare hosts the encrypted relay. Its Turnstile security check runs only when you first enable sync, in an isolated relay-origin frame. Cloudflare says Turnstile processes signals such as IP address, TLS fingerprint, user-agent, site key, and origin for bot detection and improvement. See the Turnstile Privacy Addendum.

Relay application observability is disabled. Typehere does not use the providers' request data to build user profiles, sell personal data, or target advertising.

Cookies, browser storage, and offline use

The editor uses IndexedDB for the document, history, and—after sync is enabled—the active capability record. A service worker may cache the application shell, fonts, favicon, and other static interface assets so the editor can reopen reliably. Typehere does not set an advertising or analytics cookie. Cloudflare Turnstile may use strictly necessary challenge technology while the enrollment check is active.

Your choices and the limits of the design

• Stay local-only by never selecting Not synced.
• Export Markdown whenever you want a portable copy.
• Clear Typehere's site data in your browser to remove local storage.
• Keep access links out of chat logs, screenshots, shared bookmarks, and untrusted password managers.

Encryption protects document content from the relay; it cannot protect an unlocked browser, a compromised device or extension, a leaked access link, clipboard monitoring, or someone looking over your shoulder. Because there are no accounts or identity index, Typehere cannot search for a document by your name or email and cannot recover a lost key.

Changes to this note

Material changes will be reflected on this page with a new effective date. The privacy model described here applies to the current service; future features will be documented before they change what the browser sends or what the service retains.