Privacy Policy

The short version

By default, everything you create in Silt stays on your device and is never sent to us. If you choose the paid hosting plan, your content is encrypted on your device before it is uploaded, so our servers only ever store ciphertext. We don’t sell your data, we don’t run ads, and we don’t track you across the web.

What we collect

• Account information. If you create an account to use hosting, we store your email address and authentication details so you can sign in.
• Encrypted backups. With hosting enabled, your documents, highlights and books are uploaded as encrypted blobs. When you set a passphrase, this is end-to-end encrypted and unreadable to us.
• Billing information. Payments are handled by our payment processor. We do not store your full card details on our servers.
• Minimal technical logs. Basic, short-lived server logs needed to operate and secure the service.

What we don't collect

On the free plan we collect nothing — there is no account and no upload. We never read the contents of your notes, highlights or books, and AI features such as search and retrieval run on your own device.

End-to-end encryption

Hosting uses a wrapped-data-key model: a key on your device encrypts your content, and that key is itself protected by your passphrase. We store only the encrypted key and the ciphertext. We never see your passphrase or the unencrypted key, which means we cannot read your content and cannot recover it if you forget your passphrase.

Service providers

We rely on a few processors to run the service:

• Supabase — authentication, database and encrypted file storage for the hosting plan.
• Our payment processor — to process subscription payments securely.

Data retention & deletion

We keep your encrypted backups for as long as your account is active. You can delete your data from any device, and you can ask us to delete your account and any stored backups by emailing santisonzini1234@gmail.com. Deletion is permanent.

Your rights

You may request access to, correction of, or deletion of your personal data at any time. Because hosted content is end-to-end encrypted, we can return or delete it, but we cannot decrypt it for you.

Children

Silt is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above.

Contact

Questions about privacy? Email santisonzini1234@gmail.com.