Privacy, plainly

The taste board is free and works without an account. Here is what goes where.

Without an account: it stays in your browser

Your reactions, notes, voice recordings, pins, groups, the sites you clip and your profile are kept in this browser (IndexedDB) and nowhere else. Clearing your browser's site data, or Account → Clear this browser's board, removes them.

Like any website, the server sees requests for the app and the library's screenshots, with your IP address and browser, in Cloudflare's logs. When you paste a link to add, the server fetches that page to read its title; the link isn't stored.

AI help: off unless you turn it on

Nothing goes to an AI unless you tick Let a little AI help. When it's on, each step sends only what it needs:

Picking a next card, a question, your read: what you're making, your own words, the sites you liked, passed and pinned, and their tags. The server passes this to Claude Haiku (Anthropic) through our shared gateway and returns the answer. We don't store it: the gateway keeps counts and costs, not your words, and it never caches these answers.
Starting a lens, and a lens's read: the sentence you typed about what you're making; for the read, that lens's words, likes, passes and pins, and the names of the tags it shares with your other lenses. Same path, same rules as above.
Transcribing a voice note: the recording goes to Cloudflare Workers AI (Whisper) and the text comes back. The recording isn't kept on the server.

Anthropic's and Cloudflare's own terms apply to what they receive. If a read written by AI ever quotes you, it must match your words exactly, or it's set aside.

With an account: a copy for your devices and your AI

An account is your email address, verified by a sign-in link. Your board's records are stored in Cloudflare D1 and your recordings and clip images in Cloudflare R2, so your devices stay in step and your own AI can read them. Sign-in links, sessions and tokens are stored only as hashes. This isn't end-to-end encrypted: we could technically read it. We don't sell it, share it or train anything on it.

Your AI (MCP): only the assistants you connect can read your board, read only unless you allow it to add reactions. Disconnect any of them on your account page.
Sharing: nobody else sees your board unless you share it with a person or studio by email. They can read, never change it, and you can stop at once.
New sites for everyone: if two or more people clip and like the same site, its address alone (never who, never what they said) may be suggested to others. Turn this off on your account page.

Deleting

Account → Delete my account removes your account and everything in it: records, recordings, images, tokens, AI connections and shares. Cloudflare keeps the database's point-in-time recovery for up to 30 days, after which it's gone from there too.

Who runs it

Unforced Development runs taste.unforced.dev on Cloudflare. The code is open source under the MIT licence: github.com/unforced-dev/taste-board. You can run your own copy.