Privacy

Last updated 9 November 2026

spillsort is a place to keep things for yourself. This page says what it keeps, where, and who else touches it.

What spillsort keeps

• Your Google account’s email address, name and profile picture, to sign you in. spillsort never sees your Google password.
• What you save: notes, links, photos, files, and what spillsort adds to them (a title, a category, tags, a place on the map).
• One cookie that keeps you signed in for up to 90 days, renewed while you use spillsort. There are no ads, no trackers and no analytics.
• Counts, not contents: the person who runs spillsort sees each account’s email, the day it joined and how many things it saved, to know whether spillsort is useful. Never what you saved.

Where it’s kept

spillsort runs on Google Cloud, in Belgium, and keeps your things in a MongoDB Atlas database, which is encrypted on disk. On top of that, spillsort encrypts private items (card numbers, IBANs, keys, passwords), photos and files with its own key, kept apart from the database. A backup of the whole database, encrypted with that same key, goes to the private Telegram chat of the person who runs spillsort (one file a day, refreshed when something changes), so nothing is lost if the database is.

Who else sees it

• Claude, by Anthropic, reads ordinary things you save so it can file them, and the things that match when you ask a question: the text, a link’s title and description, the words in a photo or a file. It is reached through Anthropic’s API, whose commercial terms don’t let Anthropic train its models on what it’s sent. Private items are never sent to it.
• Public lookups: when you save a link, spillsort opens that page to get its title and picture (asking YouTube, Vimeo, Spotify and similar sites for their own videos and songs). A place’s name and city go to OpenStreetMap to put it on your map. A film, book or album title goes to Apple’s public iTunes search for its cover. The map’s background comes from OpenStreetMap, and its code from unpkg.
• Telegram, only if you connect your own bot: what you send it passes through Telegram on its way here.

Nobody else sees what you save, and nothing is sold or shared for advertising.

Deleting

Deleting something removes it for good; there is no trash. spillsort keeps a one-way fingerprint of what you deleted, so an import never brings it back. Deleting your account (Settings → Delete account) removes everything, fingerprints included, straight away. Backups made before then still hold it, encrypted, but restoring a backup never brings back anything deleted, or a deleted account.

Taking it with you

Settings → Your data downloads everything you saved, at any time, as a file, as Markdown or as a spreadsheet.

Questions

Write to hello@spillsort.app.