Encrypted on the device, before anything leaves it. Synced through a server I host myself — one that stores ciphertext and never holds a key.




That list is the honest one. Metadata is what a design like this cannot hide, so it is written down rather than glossed over.