Space
Privacy
One page, plain words. The table below is the same one the app shows you inside, on your account's “Your data” shelf.
What runs where
| your… | lives | crosses the wire | the room sees |
|---|---|---|---|
| widgets & their contents | the server | to everyone in the space | yes — that’s the point |
| name, email, picture | a signed cookie | at sign-in only | name & picture |
| Google mail/calendar/docs | Google → your server → your screen | per widget, per read | what the widget shows |
| Google tokens | server disk, 0600 | never to a browser | never |
| iMessage · Signal · WhatsApp | your Mac only | relayed live, stored nowhere | only what you add, private at birth |
Signing in
Space asks Google for your name, email, and picture — nothing else. Mail, calendars, and documents connect later, per widget, one kind at a time, and only if you add that widget. A card says whose account it spends, right on the card.
Messages
iMessage, Signal, and WhatsApp are read by the desktop app on your own Mac. The server relays what a widget asks for and stores none of it — when your Mac is closed, those widgets say so rather than showing you something stale.
What we count
Four numbers a day: arrivals at this page, sign-ins started, sign-ins finished, desktop apps connecting. Sums only — no addresses, nothing finer than the date. There are no third-party trackers and no advertising identifiers, which is why this site has never asked you to accept anything.
Leaving
Export any space you own as JSON from your account. Deleting your account revokes your Google connections at Google, erases the records of them, ends every session, and starts a fourteen-day clock on the spaces you own — the people in them are told. Your words in other people’s spaces stay theirs, signed with your name.
Running it yourself
Space is one small server you can run. Do that and none of the above involves us at all: the data is on your machine, and this page describes your box, not ours.