Effective date: September 20, 2026
Last updated: September 20, 2026
Jot is a Markdown publishing service operated by WinnerSight. This policy explains what information Jot collects, why it is used, when it may be shared, and the choices available to you.
When you receive and use a Jot account, we may store your email address, handle, display name, biography, timezone, site preferences, theme settings, and invitation status.
We store the Markdown notes, titles, tags, collections, publishing settings, custom-domain information, and media you choose to upload or import. Publishing settings may include passwords, expiration dates, listing preferences, and whether a site is public or private.
Content you publish publicly can be viewed by anyone who has the URL. Content published on a private site is available to the people authorized for that site, but you should not use Jot as the sole repository for highly sensitive information.
We store email addresses used for Jot account invitations and private-site reader invitations. When an invited reader requests access, we use the email address to send a one-time code and to create a temporary access session.
You can publish a temporary note without an account. We store the submitted Markdown, its expiration setting, and related technical and activity information. Anonymous notes stop being publicly accessible after the selected expiration period, which is 24 hours by default and no more than seven days.
Expired notes may remain in operational systems and backups after that point. Do not publish confidential, regulated, or highly sensitive information through anonymous publishing.
Jot records operational and security events such as sign-ins, sign-outs, failed authentication attempts, publishing actions, administrative actions, API and CLI activity, and note views.
These records may include:
Jot uses this information for security, abuse prevention, troubleshooting, service operation, rate limiting, and basic view counts. Obvious automated crawlers and repeat views within a short period may be excluded from view counts.
We use collected information to:
We do not sell or rent personal information. We do not use Jot content or activity for third-party advertising.
Jot uses cookies that are necessary to provide requested functionality:
These cookies are used for authentication and requested product features. Jot does not use advertising cookies or third-party analytics cookies.
The Jot CLI can store the server address and API credential locally on the user's device. Users are responsible for protecting access to that device and credential file.
Jot may use service providers for limited operational purposes, including:
Providers receive only the information reasonably necessary to perform their services and are not permitted to use it for their own advertising.
Information may be processed in the United States and in other locations where these providers operate.
We retain account information and content while an account remains active or until deletion is requested, subject to operational, security, and legal needs.
Anonymous notes become inaccessible after their selected expiration period. Expired content, deleted content, and account information may be retained in operational systems and backups.
Authentication codes are short-lived. Cookies expire according to the periods described above.
Security and activity records are retained as reasonably necessary for security, abuse prevention, troubleshooting, and service operation. Jot may retain limited records when required to comply with law, resolve disputes, or enforce agreements.
We use reasonable administrative and technical safeguards designed to protect the information handled by Jot. Account access uses time-limited login codes. API credentials and protected-note passwords are not intentionally stored in plaintext.
No system can guarantee absolute security. Keep independent copies of anything you cannot afford to lose, and contact us promptly if you believe an account or credential has been compromised.
You may contact us to:
Some security records, abuse-prevention records, and backup copies may be retained for a limited period after a deletion request when reasonably necessary.
Send requests to [email protected]. We may need to verify your identity before completing a request.
Jot is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information through Jot.
We may update this policy as Jot changes. The current version and its effective date will always be posted on this page. Material changes may also be communicated to account holders by email or through the service.
Questions or privacy requests can be sent to [email protected].