Privacy
The short version: your documents never leave your device, nothing about you is collected, and there are no cookies to consent to. The rest of this page is the detail, including the parts that are not simply "nothing".
Your documents
They are never transmitted. Every operation runs inside this browser tab, and the results are written straight back to your downloads. Nothing about a document — not its name, not its size, not the fact that you opened one — is sent anywhere or recorded.
What is kept on your machine
Four things, all in your own browser and none of them leaving it: the theme you picked, so the site does not flash the wrong one at you next time; the documents you have open, which live in the tab and are gone when you close it unless you explicitly keep them; any recipe you asked this browser to save, which is a list of operations and the settings you typed, never a password and never a document; and a copy of the site itself — its pages, its code and its typeface — so that it opens without a connection. That last one holds no document and never has: it is the same files anybody visiting this address is sent. Every saved recipe is listed on the recipes page and can be deleted there, and clearing your browser's site data removes all four.
Analytics and cookies
There are none. No analytics script, no tag manager, no advertising pixel, no cookie of any kind — which is why there is no cookie banner. The site also loads nothing from any other domain: no font CDN, no framework CDN, no embedded video. Every byte comes from this one origin, and you can confirm that in the network panel.
The AI features
There are none on this site yet, and this section will be written in the present tense when there are. The design they will follow is already decided and is the reason for saying it here: AI will be bring-your-own-key. You configure your own provider, your key is encrypted and kept on your own device, and Pagecraft operates no inference of its own and no proxy. Asking an AI question about a document will send the text needed to answer it from your browser directly to the provider you chose, on that action and no other. It will be the only circumstance in which any part of a document crosses the network, it will never happen without you asking, and it will never come to us.
What the host can see
This site is static files served by a hosting provider, and serving a file means the provider handles a request: an IP address, a page URL, a browser version, in ordinary server logs we do not use for anything. That is the whole of what any web server sees about any visit. Self-host it and even that is yours — the build is a directory you can serve from anywhere.
Your rights, and why there is little to exercise them on
Data protection law gives you the right to see, correct and delete the personal data an organisation holds about you. We hold none: there is no account, no profile, no mailing list and no record of anything you have done here. If that ever changes, it will change on this page first, and the source history will show when.