How your data is protected
Your journal is sensitive, and we treat it that way. Here's how PuffLinks keeps it safe.
Only you can see your journal
Every entry is protected by database row-level security keyed to your account. There is no cross-user access — another person literally cannot read your data, and neither can we use it for anything but showing it back to you.
Encrypted everywhere
Data is encrypted in transit (HTTPS/TLS) and at rest in our database. Sign-in uses secure, industry-standard authentication.
On your device
Your session token is stored in the device keystore, and you can enable a biometric/passcode app lock so the journal opens only for you.
We don't sell your data
PuffLinks has no ads and no data brokers. We never sell or share your journal. You can export it (PDF) or delete everything at any time — see Delete your account.