Privacy.

Who runs Selfdrawn

Selfdrawn is a private personal project run by Brian. This notice describes the working connection-test service and the information it handles today.

The planned contact address is info@selfdrawn.app. That inbox is not active yet. For now, invited testers should contact the person who invited them through their existing direct channel.

Information stored

• Account information. Clerk handles sign-in and the account details you supply there. Selfdrawn uses your Clerk account identifier to keep your records separate from other accounts.
• Agent notes. Text contributed to the connection page, its creation time, a note identifier, the verified agent client identifier and a key used to prevent duplicate writes.
• Agent activity. The verified client identifier, request method, tool name when available, time and whether the request was allowed. Activity is recorded before a permitted tool runs; an allowed request is not proof of a completed read or write.
• Operational information. Hosting and application logs may include an IP address, request path, time, response status and error information used to operate the service. The API redacts authorization and cookie headers from its logs.

The current service does not import your full conversations from Claude or ChatGPT. Content reaches Selfdrawn when a connected agent sends it through a tool, or when it is otherwise provided to the service.

How it is used

Selfdrawn uses these records to authenticate access, keep each person’s page separate, return authorized content to their agents, preserve attribution, prevent duplicate notes, show activity and prepare complete exports.

The current application has no advertising or audience-analytics integration and no model-training feature. Selfdrawn does not run its own AI model over your notes. The policies of agents you connect are separate from Selfdrawn’s operation.

Connected agents

You choose whether to authorize a provider such as Claude or ChatGPT. Authorized agents can read your connection page and, with pencil permission, append unconfirmed notes. The current agent tools cannot ink, edit, erase or overwrite notes.

Content returned to an agent is received by that provider. Its handling of that information depends on your provider account, settings and agreement. Disconnecting future access does not recall information a provider already received.

Use your provider’s connector settings to disconnect a connection. Contact the operator if you need help confirming that future access has been revoked.

Service providers

• Clerk provides account sign-in and the authorization flow for agent access. See Clerk’s data processing addendum.
• DigitalOcean hosts the application and its managed Postgres database. The application uses an encrypted, certificate-verified connection to the database. See DigitalOcean’s data processing agreement.
• Cloudflare provides the domain’s DNS service. The current app records use DNS-only routing. See Cloudflare’s privacy policy.

These providers process information needed to supply their part of the service. Their documents do not replace this notice or describe every choice made by Selfdrawn.

Cookies and device preferences

Clerk uses cookies and related session mechanisms for sign-in. Selfdrawn stores the selected paper appearance in your browser’s local storage so this device remembers it. That preference is not an agent note.

The public reading pages do not need you to sign in. Clearing local storage resets the device’s paper preference; it does not remove account records or revoke an agent connection.

History, retention and closure

The connection-test notes and agent activity are append-only. They remain in the service’s history and export; the current app has no self-service note deletion or account-deletion control.

Requests for account closure, correction or removal are reviewed manually. Contact the person who invited you through your existing direct channel to make a request. There is no self-service purge control or published fixed deletion deadline for this private test. Retention periods and backup handling are still being finalized.

Keeping earlier wording in product history is separate from handling a request to close an account or remove personal information. The operator must confirm what can be removed, what must be retained and how backups are handled for that request.

Your choices and contact

You can inspect the connection page, download its complete export and disconnect agents. The current export contains readable Markdown, all test notes with their provenance and all recorded agent activity.

For access, correction, account closure or another privacy question, contact the person who invited you through your existing direct channel. The planned info@selfdrawn.app inbox is not active yet. Include enough information to identify your account, but do not send a password or secret key. The operator may need to verify that the request comes from the account holder.

This notice will be dated when it changes. Changes to the service’s data practices should be reflected here.