A writing app where “private” is a place, not a promise

Three sentences, no qualifiers:

• Drafts are stored on your device. The open document is kept in localStorage; the library and its images live in IndexedDB. Both belong to this browser profile, not to an account.
• There is no document API. The /api/ surface exists for billing and feature flags. It stores subscription state and flags — there is no endpoint that accepts a title or a paragraph.
• Nothing is uploaded by default. The editor talks only to its own origin. The site's analytics count page visits; they never receive document text.

Privacy pages usually ask for trust. This one asks for thirty seconds:

1. Open the editor and type a sentence.
2. Open DevTools (F12) and switch to the Network tab. Filter to Fetch/XHR.
3. Keep typing, format something, add a list. Watch the request list.
4. Search the page source or the local storage for your sentence: it is there, in localStorage. It is not in any request.

What you will see leaving the page is assets, an analytics hit and — on the landing pages — a cookieless event to /e carrying an event name such as first_keystroke, never text. The privacy page lists every one of them, including the analytics that may set cookies; how it works shows where each piece runs.

Scroll the table sideways to read every column →

That is the trade-off of local-first: nothing can leak from a server that does not hold your work, and nothing can be recovered from a server either. Export a .quorly package for a backup that keeps the images, sync a folder with Local Sync, or use Pro Cloud Sync if you want a copy in your own Drive. The backup guide turns that into a routine.

Pro Cloud Sync writes documents to your own Google Drive. The browser gets a short-lived token from /api/sync/token, uploads the file directly, and Quorly never receives the contents — it brokers the credential, not the document. That is the only path by which a draft can leave the device, and it is off until you turn it on.

Local Sync is the no-cloud version and works on the free plan: it writes one .quorly file per document to a folder you choose, with conflicts surfaced rather than silently merged.

Journalists protecting a source, authors under an NDA, people drafting something about their employer, anyone who does not want a model reading a half-finished sentence. It is also for people who simply do not want another account: the editor asks for nothing, and there is no sign-up.