Privacy

There's nothing to collect, because there's nowhere to send it.

Last reviewed 31 July 2026 · Pellet 0.4.0 and this website

This describes how the software behaves; it has not been reviewed by a lawyer, and a formal policy will replace it before Pellet is released. Everything below is accurate for the version named above and was checked against the source rather than written from memory.

The short version

Pellet has no account system, no sign-up, and no Pellet-operated server. Your vault is a folder on your own disk. The app works with the network switched off, and if this website vanished tomorrow your notes would carry on exactly as they are.

There is no analytics, no telemetry and no crash reporting in the app — not disabled by default, not present at all. You can check that the way it was checked: search the source for any analytics vendor and you'll find nothing.

What never leaves your machine

  • Your notes, tasks, canvases, whiteboards and handwriting pages.
  • File and folder names, tags, and the links between notes.
  • What you search for, and what you have open.
  • File history — every save is versioned locally, in your vault, and nowhere else.

Every connection the app can make

This is the complete list. Everything except the license check is off until you switch it on, and each one talks only to the service you pointed it at.

WhoWhenWhat is sent
Your relayOnly if you turn on device syncEncrypted vault data. The relay is a server you run yourself — there is no Pellet-operated relay. It stores ciphertext, signatures and device ids; never note text or file names.
Lemon SqueezyWhen you activate a license, then about once every 14 daysYour license key, a device name, and an activation id, so a license can move between machines. No vault content. Pellet keeps working offline for 30 days between successful checks.
GoogleOnly if you connect Google CalendarCalendar events, through your own Google Cloud credentials. Pellet does not proxy this.
Apple / iCloudOnly if you connect iCloud CalendarCalendar events over CalDAV, using an app-specific password you create.
An ICS feed you nameOnly if you subscribe to oneA read-only fetch of the URL you entered. Nothing is sent back.
An AI provider you chooseOnly if you transcribe a handwriting pageThat page, sent to Anthropic, OpenAI or Google using your own API key. One page, when you ask.
UnsplashOnly while you search for an image to insertYour search term. Nothing about your vault.

One thing we went out of our way to stop

Excalidraw, which powers Pellet's whiteboards, loads its hand-drawn fonts at runtime and — left alone — falls back to fetching them from a public CDN the first time you open a board. An offline-first app quietly making a third-party request is exactly what this page exists to rule out, so those fonts are bundled into the app and the fallback is disabled. Opening a whiteboard makes no network request.

Sync, specifically

If you turn on device sync, you host the relay: a single file you run on your own machine or server. Everything it stores is encrypted with keys that exist only on your devices — they exchange keys directly with each other at pairing and pin them there, so the relay is never asked to vouch for anybody. It can refuse to hand your data over. It cannot read it, alter it, or add to it.

This website

getpellet.app is static files. It sets no cookies, loads no third-party scripts, and embeds nothing from another domain — even the fonts are served from here rather than a font CDN. There is currently no analytics of any kind. If that changes it will be a cookie-free, privacy-respecting tool, and this page will say so before it goes live.

The web server keeps ordinary access logs — IP address, page requested, timestamp — for a short period, for security and debugging. They are not used to profile anyone and are not shared.

Children

Pellet is a general-purpose tool with no account system and collects nothing, so there is no age-gated data to speak of. It is not directed at children.

Asking about your data

There is no database to search — your data is on your disk, and the only record connected to you is a license key, if you buy one. To ask about or delete that, email privacy@getpellet.app.

Changes

If this page changes materially, the date at the top changes with it and the release notes will say so.