Privacy

Short, because there is little to describe.

Last checked 9 September 2026

In short. This website collects an email address if you hand one over, plus a hashed IP and a timestamp as proof you consented. The app collects nothing and has no account. The trust page shows how to verify each of those.

1 · Who is responsible

Jarrel Pothoff, an individual in the Netherlands. There is no registered company, so there is no Chamber of Commerce number or VAT number to publish. Contact: the support page.

2 · The waitlist

When you submit the form, this is sent to the waitlist service and stored:

  • Your email address — so the launch email can reach you.
  • A consent version string — which sentence you agreed to.
  • A timestamp — when.
  • A truncated user-agent string — the browser you used, capped at 500 characters.
  • A salted SHA-256 hash of your IP address — not the address. The hash proves the consent came from somewhere, and cannot be turned back into an IP without the secret salt.
  • Which form you used — the one in the header or the one at the bottom of the page. Nothing more granular.

Legal basis: consent (GDPR Art. 6(1)(a)), given by pressing the button underneath the sentence describing what you get. Retention: until you unsubscribe, or until the launch email has gone out and the list is deleted — whichever comes first.

Signup is double opt-in: nothing is sent to you until you click the link in the confirmation email.

3 · What this website does not do

  • No cookies are set. There is no consent banner because there is nothing to consent to.
  • No analytics, no tag manager, no pixel, no session recording.
  • No third-party origin can be contacted at all: the Content-Security-Policy on every response is connect-src 'self', with no exceptions.
  • No fonts, scripts or images are loaded from a CDN — everything is served from this host.

4 · The app

Lattice is not released, so nobody's notes exist in it yet. By design: notes stay on your device, sync (if you enable it) runs through your own iCloud account, and note content is encrypted with AES-GCM-256 before it is written. There is no account and no server of mine holding notes.

The one designed exception is the AI layer — a question about your vault, and the note excerpts needed to answer it, would go to a server. That layer is not running. When it is, this section and the trust page change in the same commit as the code.

5 · Your rights

Access, rectification, erasure, restriction, portability and objection under the GDPR. In practice the entire dataset is one email address, so the fastest route to erasure is the unsubscribe page. For anything else, write to me. You may also complain to the Dutch DPA (Autoriteit Persoonsgegevens).

6 · Changes

If this notice changes materially, the date at the top changes with it. It is not versioned in a database; it is a file in the repository with a history.