Privacy
Privacy policy
Effective Controller: Reason22
Reason22 operates Rationable and is the controller of the personal data described here. Questions and requests go to privacy@rationable.app.
Rationable is in private testing. This policy describes what the software does today, not what it is planned to do. If something changes, this page changes with it and the effective date above moves.
The short version
- This website sets no cookies, runs no analytics and loads nothing from other companies.
- The app keeps your outline on your own machine and needs no account to do it.
- If you sign in to the hosted sync service, your outline is stored on Cloudflare infrastructure that Reason22 controls, and it is not end-to-end encrypted.
- Nothing is sold, and nothing is used to train a model.
This website
rationable.app is a set of static pages served by Cloudflare. It has no accounts, no forms and no tracking. Fonts are served from this domain, so opening a page does not tell any other company that you did.
Cloudflare handles the connection and processes your IP address and request metadata to serve the page and to protect the service from abuse. That processing is Cloudflare's, under its own terms, and it is the ordinary cost of the page reaching you.
The app on your own machine
On the desktop your document is a SQLite file that the app owns, with attachments stored as files beside it. On the web the current build keeps a single snapshot in your browser's local storage. Neither leaves your machine unless you sign in to sync.
The app sends no usage statistics and contacts no analytics service.
The hosted sync service
Sync runs at https://api.rationable.app and only ever holds data for accounts that have signed in. It stores four things.
- Your identity
- Signing in uses Google. Google returns your name, email address, profile picture and a stable identifier for your Google account, and those are stored together with the account and session records the service needs to keep you signed in. This lives in a Cloudflare D1 database created in Cloudflare's EU jurisdiction. Tokens held for Google are encrypted before they are written.
- Your outline
- Your writing reaches the service as an ordered log of the edits you made. The server puts that log in order, stores it and hands it back to your other devices without decoding the contents of the individual edits. It is stored in a per-account Durable Object created in Cloudflare's EU jurisdiction.
- Your attachments and snapshots
- Files you attach, and periodic compacted copies of your outline, are stored in a Cloudflare R2 bucket created in Cloudflare's EU jurisdiction.
- Operational records
- Each request writes a fixed record: a request identifier, the HTTP method, which category of route was hit, the status code and how long it took. It carries no account identifier. Background jobs that work on one account, such as deleting it, additionally record a one-way hash of that account. No note text, no file names and no email addresses appear in any of it. Cloudflare separately keeps its own platform logs.
What the service can read
Be clear about this: Rationable is not end-to-end encrypted. Your outline travels over TLS and is encrypted at rest by Cloudflare, and the sync service is built so that it does not need to decode your edits to do its job. It is nonetheless technically able to. The storage format has a slot for client-side encryption, and that slot is not in use, so do not treat the hosted service as private from its operator.
Where the processing happens
The database, the object storage and the per-account sync object are created in Cloudflare's EU jurisdiction, which controls where that data is stored and where that code runs. It does not control everything. Cloudflare terminates TLS and serves static pages at whichever edge location is nearest to you, keeps its platform logs under its own arrangements, and Google processes your sign-in wherever Google processes sign-ins. So Rationable does not claim EU-only processing, and this policy will not pretend otherwise.
The companies involved are Cloudflare, for hosting and storage, and Google, for sign-in.
Why we are allowed to hold it
- To give you the service you asked for: keeping your account, syncing your outline between your devices, storing your attachments. Without this there is no service.
- To keep the service standing up: rate limiting, abuse prevention and the operational records above, which is a legitimate interest in running a system that works and is not being attacked.
How long it is kept
Your account data stays while the account exists. Deleting your account removes your identity records, your synced operation log, your attachments and your snapshots. The deletion runs as a background job that resumes if it is interrupted, so it can take a little time to finish, and it is not reversible.
Deleting your account does not touch the copy on your own machine. That file is yours and stays where it is until you delete it.
Your rights
If you are in the EU or the UK you can ask for a copy of your data, ask for it to be corrected or deleted, ask us to restrict or stop a particular use, and ask for it in a portable form. Write to privacy@rationable.app. You will get an answer within a month, or be told inside that month why a complicated request needs longer, which is the extension the GDPR allows. You can also complain to your national data protection authority.
Children
Rationable is not intended for people under 16, and accounts are not knowingly created for them.
Changes
Changes are published on this page with a new effective date. During private testing the service is changing often, so the date is worth checking.
Contact
Reason22, by email at privacy@rationable.app.