Arguma

Privacy Policy

Last updated: 16 July 2026

Arguma is a reasoning workspace. Your maps are your thinking, and we treat them that way: we collect the minimum needed to run the service, we don't sell anything about you, and you can take your data out — or erase it — whenever you want. The details follow.

Who we are

Arguma is operated by the Arguma team. For any privacy question or request, email [email protected] — a person reads it.

What we collect

• Account data: your email address and, if you sign up with a password, a securely hashed version of it (never plain text). If you sign in with Google, we receive your email address and a stable Google account identifier instead — we never see your Google password. Google's own privacy policy governs their side of that sign-in.
• Content you create: your maps, thoughts, links, labels, share links, and any feedback you send us.
• Technical data: a session cookie to keep you logged in, and standard server logs (IP address, browser type, timestamps) used for security, rate limiting, and debugging. Logs rotate on a short schedule.
• In your browser: we use localStorage for convenience data such as node positions and view preferences. It stays on your device and is not tracking.

How we use it

• To run the service — storing and displaying your maps and account.
• To send transactional email only: email verification and password resets. No newsletters you didn't ask for, no marketing drip.
• To keep the service secure, prevent abuse, and fix problems.

We do not sell your personal data, we do not run ads, and we do not train AI models on your content. The only measurement we do is the cookieless, aggregate web analytics described below.

Share links

Sharing is always your explicit action. When you create a share link for a chain, anyone with that link can view that chain (read-only, live). You can see every active link under Shared chains in the app and revoke any of them instantly — revoked links stop working immediately.

Service providers

We share the minimum necessary data with providers that help us run Arguma:

• Hosting — our servers and database store your account and content.
• Cloudflare — content delivery, TLS, and security in front of the site, plus the cookieless web analytics described under Analytics.
• Resend — delivers our transactional emails and receives your email address for that purpose only.
• Google — only if you choose Google sign-in, as described above.

Cookies

One essential, first-party session cookie keeps you logged in. It is HttpOnly, Secure, and SameSite=Lax. There are no advertising or tracking cookies — not "minimal", none.

Analytics

We use Cloudflare Web Analytics, a cookieless measurement service, to understand things like how many people visit, which pages they view, and where they came from. It sets no cookies, does not fingerprint your device, and does not follow you across other sites — we only ever see aggregate numbers, never a profile of you. It measures page visits only: your maps, thoughts, and anything you type are never part of any analytics.

Your data is portable

You can export any map at any time from within the app — as JSON, a Markdown outline, a PNG, or an Obsidian vault. No lock-in is a feature, not a promise.

Data retention & deletion

We keep your account and content until you delete them. Deleting your account (Account → Delete account) permanently erases your account, maps, thoughts, links, labels, and share links. One exception, in the open: if you sent us product feedback, the feedback text is retained in anonymized form — your email and account reference are removed at the moment of deletion. Backups are kept for a limited period for disaster recovery and then overwritten.

Your rights

Depending on where you live (for example the EEA/UK under GDPR), you may have rights to access, correct, export, delete, or restrict processing of your data. Most of these you can exercise directly in the app (export and deletion are built in); for anything else, email [email protected] and we'll handle it.

Children

Arguma is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes

If this policy changes, the date above changes with it, and material changes will be announced in the app or by email before they take effect.