Foldinto
← Back to desk

Privacy Policy

Updated: 5 November 2026 · Foldinto 0.2.0 preview

This page explains how this overseas Foldinto test site handles your information. Foldinto is made and maintained by an independent developer. Contact: dingzhongyidxy@gmail.com.

1. Using Foldinto without signing in

Your notes, images, videos, calendar entries and positions are stored in this browser using localStorage and IndexedDB. Clearing this site's browser data can remove that local content. Use the avatar menu → Export all data to save a complete backup first.

When you save a link, the site may send its URL to our metadata service on Cloudflare and request the linked page's public title and cover. Loading remote images or videos also contacts their source websites. Your personal writing is not sent to the metadata service.

2. Google sign-in and cloud sync

Sign-in currently uses Google only. We receive your Google account identifier, verified email address, name and profile image to identify your account. Foldinto does not receive or store your Google password. We use an essential, protected login cookie that lasts up to 30 days; signing out revokes the relevant session.

While you are signed in to the account-enabled test site, your account's notes, writing, links, calendar entries, positions, images and videos sync to Cloudflare D1 and private R2 storage. Access is restricted to the signed-in owner; there is no public note or community feed in this version. A private media download requires your active session and a temporary link.

Existing browser notes are only copied into an account after you choose “Put in my account.” Choosing “Not now” leaves them in this browser; you can move them later from the avatar menu. A signed-in backup import writes directly into the current account, skips existing note identifiers, preserves the bin and does not import the backup's profile.

3. Providers and essential storage

We use Google for sign-in and Cloudflare for hosting, the metadata service, the account database and private media storage. Those services may process technical information such as your IP address, browser information and service error logs as part of operating their services. Data may be processed outside your country.

We use essential cookies and local storage for login, language, offline changes and recovery of interrupted transfers. We do not sell your notes, use them for advertising, or train AI models on them. We do not request access to your Google contacts, mail or files.

4. Exporting and deleting

You can export your notes and original media through the avatar menu → Export all data. Keep your downloaded backups somewhere you control. To delete an account, open Personal profile → Delete account. You can export first; deletion then requires you to enter the current account's email address again.

Before deleting, the server creates an isolated private backup of that account's notes, positions, calendar entries and complete media files. If backup creation fails, deletion stops. This restricted backup is only for recovery from deletion failures. It is retained for 7 days, then automatically cleared; physical cleanup may have a short processing delay.

On successful deletion, the account's active cloud content and media are removed and all its login sessions are revoked. The product provides no account-restore action. Deletion does not automatically erase browser-only notes, local snapshots or backups you have downloaded. If deletion is interrupted after the backup, the interface keeps a retry action instead of reporting success.

5. Keeping your data safe

Transfers use HTTPS. Offline changes and interrupted transfers may be stored on this device until they can finish. Export important content regularly, and sign out on shared devices. Clearing browser data can also remove unsynced changes and interrupted transfer sources.

6. Changes and contact

We will update this page when these data flows change. For questions about your account or data, contact dingzhongyidxy@gmail.com.

Email sign-in and account security

When you sign in with email, we send a verification code to that address. Your email is used only for sign-in, account notices and account security, never for marketing. Alibaba Cloud DirectMail delivers these emails when configured. Available sign-in methods are shown in the sign-in card. Verified methods may be linked to the same account; we do not merge the content of two existing accounts.

If a request triggers abuse protection, Alibaba Cloud Captcha may process browser, network and interaction information to check that it is a human request.

In case of ambiguity, the English version prevails.