Privacy policy
The short version
Thoth is a browser extension that remembers pages you actually read, so you can find them again. Your archive lives in your browser. Without an account, Thoth sends nothing anywhere. Some optional features need an account and send a limited amount of data to our servers, described below. We do not sell data, show ads, or use your data to train models.
What Thoth stores on your device
When a page stays open and in focus long enough (10 seconds by default, or only when you ask, depending on your setting), Thoth saves in your browser's local storage:
- the page address, title, a text excerpt and the readable page text;
- when you visited, how many times, and how long you actively read;
- anything you add: notes, saved passages, favourites and collections;
- your settings, blocked sites and a short local diagnostic log.
Thoth does not save pages on sites in your Blocked Sites list, unless you save a passage or a note on one, which remembers that page. It does not save pages that look like sign-in, password-reset, verification or OAuth flows, including pages showing a password field. Password fields are removed before any page text is read. Addresses are stored with known secret parameters (tokens, codes, keys) removed.
This data stays on your device unless you use one of the optional features below. You can export it, delete individual pages, delete everything, or remove the extension at any time.
What leaves your device, and when
Nothing leaves your device unless you create an account and turn on a feature that needs it. In Firefox, Thoth also asks for Firefox's own permission, once, before any online feature, and sends nothing until you allow it. You can withdraw it in Firefox's add-on settings.
Account (optional). If you create an account we store your email address, your name if you give one, a password hash (never the password), and, if you sign in with Google, your Google account identifier and email. Each signed-in session is stored with its IP address and browser user agent and expires after 30 days. If you ask to reset your password, we send the reset email through our email provider.
Semantic search (optional, Pro and Max). When you turn it on, Thoth sends the title and bounded chunks of text of the pages and notes being indexed, and the text of your searches, to our server, which forwards them to our embedding provider to compute numeric vectors. The vectors come back and are stored and ranked on your device.Page addresses and domains are never sent. Related-page suggestions send a page title and a bounded excerpt, or the text of a saved passage, the same way.
Find by meaning (optional, Pro and Max). When you open Thoth's find bar on a page and type a query, Thoth sends the visible text of that page, in short pieces (at most 80,000 characters per page), with your query, to our server, which forwards them to our provider's ranking service to score which pieces answer the query. Only the scores come back; neither we nor the extension keep the page text. It never runs on sign-in or account pages or pages showing a password field.
Encrypted backup and sync (optional, Pro and Max). Your archive is encrypted in your browser before upload, with keys only your devices and your recovery code can open. Our servers store the encrypted data and the routing metadata needed to deliver it (account, device and archive identifiers, sizes and timestamps). We cannot read your archive.
Thoth Web (optional). The web reader at app.thothmemory.com downloads your encrypted archive and decrypts it in your browser. Decrypted content is held only in memory for that session; the reader stores its sign-in token and device keys in that browser.
Billing (when available). Payments are handled by Stripe. We receive your subscription status, or for a Lifetime purchase the email it belongs to, and a Stripe customer reference, never your card details. Buying Lifetime sends none of your reading anywhere.
Service providers
- Cloudflare hosts our server, database, encrypted storage, this website and the early-access list. Cloudflare Web Analytics counts visits to this website without cookies and without identifying you.
- Voyage AI computes embeddings for semantic search and ranks page text for find by meaning (text only, as above).
- Resend sends password-reset email.
- Google, only if you choose "Continue with Google".
- Stripe handles payments, when billing is live.
Each processes data only to provide its service to us.
What we do not do
- No advertising, no data sale, no sharing for marketing.
- No analytics or tracking scripts in the extension.
- No training of AI models on your content.
- No reading of your encrypted archive.
Early access
If you join the early-access list, we store your email address and signup date in a private Cloudflare D1 database to contact you about Thoth’s launch. Signing up does not create an account or share your reading. To remove your email, contact [email protected].
Your choices and rights
- Use Thoth without an account, and nothing is sent.
- Turn semantic search or backup off at any time in Settings.
- Export your archive (JSON) or your notes and passages (Markdown).
- Delete pages, delete all local data, or fresh-start the extension.
- Delete your account in Thoth under Account, Delete account. This immediately deletes your account, sessions, sign-in methods, plan records and every encrypted backup from our servers, and cannot be undone. The archive on your device is not affected. An active subscription must be cancelled first; Stripe keeps its own payment records as the law requires. You can also email us and we will do it for you.
Depending on where you live you may have rights to access, correct or delete your data, or to object to processing. Contact us at [email protected].
Security
Sessions use bearer tokens held by the extension, not browser cookies. Backups are end-to-end encrypted. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.
Children
Thoth is not directed at children under 13, or under the minimum age for online services where you live, and we do not knowingly collect their data.
Changes
We will update this page and its effective date when practices change, and announce material changes in the extension.