Your calculations stay yours
Jotal has no accounts, no tracking, and no analytics. Pads live on your device. When you share one, it's encrypted in your browser first — so nobody, including us, can read it.
What happens when you share a pad
Pressing Share runs four steps in your browser, before anything is sent:
- A random 256-bit key is generated on your device.
- Your pad is encrypted with it using AES-GCM, which also detects tampering.
- Only the encrypted bytes are uploaded and stored.
- The key is placed in the part of the link after the
#.
That last detail is what makes this work. Browsers never transmit the fragment — the part after # — to any server. It exists only in the link itself.
So the server holds ciphertext and no key. We cannot read shared pads, and neither can Cloudflare, our hosting provider. This isn't a policy we promise to follow; it's a consequence of how the feature is built.
What this does and doesn't protect
It protects your content from us, from our infrastructure provider, and from anyone who might obtain the stored data.
It does not protect against the obvious: anyone who has the link can read the pad. The link is the key. Treat it like a password — if you post it publicly, the pad is public. And because we can't identify what a stored pad contains, we can't revoke or delete an individual link for you.
What's stored, and where
- Your current pad — in your browser's local storage, on your device. Never uploaded.
- Shared pads — encrypted, in Cloudflare R2 storage, kept indefinitely so links don't rot.
- Nothing else. No accounts, no cookies, no analytics, no advertising, no fingerprinting.
Network requests Jotal makes
The app works offline. When it is online it makes two kinds of request, neither of which carries your pad:
- Exchange rates from open.er-api.com and crypto prices from CoinGecko, fetched once on load.
- Sharing, only when you press Share, and only ever encrypted bytes.
As with any website, our host Cloudflare processes standard request data such as IP addresses to serve traffic and prevent abuse. We also count shares per address per day to stop spam; that counter is discarded after about a day.
The iOS, iPad and Mac apps
The apps store pads on your device. If you're signed into iCloud, they sync through your own private iCloud database — Apple's infrastructure, your account. We have no server in that path and no access to your pads. The apps collect no analytics and require no account.
Your control
- Export writes a pad to a plain text file you keep.
- Clearing your browser's site data removes everything Jotal stores locally.
- Deleting the app removes its local pads; iCloud data is managed in your Apple ID settings.
Changes
If this ever changes materially, this page will say so and carry a new date.
Get in touch
Questions about any of this, or about Jotal generally: [email protected]. If something here is unclear or looks wrong, we'd genuinely like to know.