Privacy policy

What is stored, and where

m-session stores your session data, journal entries, and app preferences using your browser’s built-in storage mechanisms:

• localStorage — Session state, preferences, and settings. Stored as key-value pairs in your browser.
• IndexedDB — Journal images and larger data. Stored in your browser’s local database.

This data never leaves your device. There is no server-side storage, no cloud sync, no backup service. If you clear your browser data or uninstall the app, this data is permanently deleted.

What we do not collect

• No personally identifiable information (name, email, phone, location)
• No analytics or usage tracking
• No telemetry or error reporting
• No cookies
• No IP address logging
• No browser fingerprinting
• No advertising identifiers
• No third-party tracking scripts
• No social media integrations that report back

This is not a simplified summary. This is the complete list. There is no data collection of any kind built into m-session.

Third-party services

m-session uses a minimal number of third-party services:

• Vercel — Hosts the website and app. Vercel may log standard web server information (IP addresses, request timestamps) as part of their infrastructure. m-session does not access or use these logs. See Vercel’s privacy policy.
• Google Fonts — Provides the Azeret Mono and DM Serif Text typefaces. Loading fonts from Google’s CDN means your browser makes requests to Google’s servers. See Google’s privacy policy.
• Tally — Powers our optional feedback form. Tally is a privacy-focused form builder — no tracking cookies, no advertising, GDPR-compliant. If you choose to submit feedback, your responses are stored on Tally’s servers. This is entirely optional and external to the app. See Tally’s privacy policy.

No other third-party services, APIs, or SDKs are used. There are no embedded widgets, no social sharing scripts, no chat services.

Audio content

Guided meditation audio is generated using ElevenLabs text-to-speech during development. The resulting audio files are pre-built and shipped with the app as static assets. There are no runtime API calls to ElevenLabs or any other service — all audio plays from files cached on your device.

Auditability

m-session is open source under the AGPL-3.0 license. The complete source code is available on GitHub. You do not have to take our word for any privacy claim — you can read the code and verify it yourself.

You can also use your browser’s developer tools (Network tab) to confirm that no data is transmitted while using the app. There are zero outbound network requests during a session.