Privacy Policy

Last updated September 6, 2026

Sill does not collect any data. There is no account, no analytics, no crash reporting, no advertising, and no third-party SDK that sends anything anywhere. Nothing you write in Sill ever reaches a server operated by the developer, because there is none.

What stays on your device

• Notes. Stored in a single SQLite database inside the app's own container on each device. On the Mac that is ~/Library/Application Support/Sill/.
• Device identity. Each device creates a self-signed certificate and private key at first launch and keeps them in the system Keychain. They identify your devices to each other and are never sent anywhere else.
• Sync log. A plain-text file next to the database records how sync went. It contains the names of your paired devices and the first characters of pairing codes. It is only shared if you paste it into a bug report yourself.

Sync between your own devices

When you pair an iPhone with a Mac, the two devices exchange certificate fingerprints through a QR code shown on the Mac. From then on they talk to each other directly over your local network or peer-to-peer Wi-Fi, using mutual TLS. Only devices you paired can connect, and only while they are near each other. No copy of your notes passes through the internet or any relay.

This is why Sill asks for the Local Network permission and advertises a Bonjour service (_sill._tcp): it is how the devices find each other in the same room. The advertised name is random and does not include your device name.

Connections to third parties

Sill contacts exactly one third party, GitHub, and only when you ask it to:

• Check for Updates (Mac) makes a single request to GitHub's releases API to read the latest version number. Sill never checks in the background.
• Report an Issue opens GitHub in your browser with the app version and OS version filled into the issue form. Whether you submit it is up to you.

Those requests are governed by GitHub's privacy statement. This website is hosted on GitHub Pages, so GitHub may log visits to it as well.

Retention and deletion

The developer holds no data about you, so there is nothing to retain or delete on that side. Deleting a note erases its text on the device and, on the next sync, on your paired devices; only an empty marker remains so the deletion can propagate. Unpairing a device removes its certificate from the other. Deleting the app removes its database and log. The device certificate stays in the system Keychain, as Keychain items do; it contains no note content and identifies nothing beyond that device.

Consent

Since no data is collected, there is no consent to give or withdraw. The Local Network permission can be revoked at any time in System Settings or Settings; Sill keeps working as a notepad without it, only sync stops.

Children

Sill has no age-specific features and collects no data from anyone, of any age.

Changes

This page lives in the app's public repository, so every change to it is visible in the commit history. Material changes will also be noted in the release notes.

Contact

Questions about this policy go to the issue tracker on GitHub.