Policies

We use a small number of cookies, and only the kind the app needs to function. No advertising cookies, no third-party trackers, no analytics following you across the internet.

• session - keeps you signed in. It's an opaque token, set HttpOnly so scripts can't read it, and it never leaves our servers in a form that means anything.
• ledossier_theme - remembers which of the themes you picked so the page doesn't flash on load.
• ledossier_cover - remembers whether redaction ("cover") mode is on, so prying eyes stay disappointed across visits.

That's the whole drawer. Clear them anytime in your browser - you'll just be signed out and back to the default theme.

The dossiers you keep - names, intel, connections, every note - belong to you. We don't read them, we don't mine them, and we don't sell them. There is no ad model here and no plans for one; you are not the product.

Your files are scoped to your account at every layer, so no other user can reach them. Passwords are hashed (argon2id, never stored in the clear), and the data sits on our servers purely so we can hand it back to you when you sign in.

In other words: it's a spy app where the agency can't see the files. The only spy here is you.