Privacy policy

What we collect

Your account. A name, an email address, and, if you sign in with Google or GitHub, the avatar those services share with us. That’s what it takes to give you an account; we don’t ask for more.

Your maps. Everything you put on a map is stored so it can be saved, synced, and shared: nodes and their text, branch colors, checkboxes, comments, reactions, attachments, and version history.

Presence. While you’re on a shared map, your name, cursor, and selection are relayed live to the other people on that map. That’s the product working, not tracking. Presence isn’t stored once you leave.

Technical logs. Like almost every web service, our servers see IP addresses and browser details. We use them for security, rate limiting, and debugging, and keep them only as long as those jobs need.

Cookies

One cookie, and it’s the one that keeps you signed in. There are no advertising trackers and no third-party analytics scripts on Suppose: not on this page, not on the homepage, not in the app.

The homepage playground

The live map on our homepage runs entirely in your browser. Nothing you type there is sent to our servers or saved anywhere.

AI features

Most AI on Suppose runs when you ask: expanding a branch, chatting about a map, building a map from your sources. Your request and the relevant parts of that map are sent to an AI model provider (such as Anthropic or OpenAI, depending on the feature) solely to generate the response.

One feature works alongside you instead: the companion. While it’s on, it reviews your latest edits as you work, which can mean sending those parts of your map to a model provider so it can prepare a suggestion. It runs only for you while you’re editing, never for anonymous visitors. It only ever proposes, and you can turn it off for any map; it stays off until you turn it back on. Whether AI runs on request or alongside you, providers receive your content only to produce that response, and we don’t use your maps to train models.

Where your data lives

Suppose runs on Cloudflare’s infrastructure. Your maps, attachments, and account data are stored there, encrypted in transit.

Email

We send transactional email only: invitations you or a collaborator triggered, and notifications about maps you’re part of. No marketing lists, no newsletters you didn’t ask for.

Sharing and guests

Your maps are private until you decide otherwise. If you share a map by link, anyone with the link (and the password, if you set one) can see it. Visitors without accounts get a random guest name. We don’t know who they are, and neither does anyone else on the map.

What we don’t do

We don’t sell your data, rent it, or share it with advertisers. The only third parties that touch it are the service providers that make Suppose run (hosting, email delivery, and the AI providers described above), and then only as far as the product requires. Beyond that, we’d disclose data only if the law genuinely required it.

Your choices

Your ideas were never hostages: you can export any map as OPML or Markdown whenever you like. If you want your account and its data deleted, write to support@letssuppose.com and we’ll take care of it.

Children

Suppose isn’t directed at children under 13, and they may not use it.

Changes

If this policy changes in a way that matters, we’ll say so plainly: here and, for significant changes, by email or in the product.

Questions

Write to support@letssuppose.com. A person reads it.