Last updated: July 25, 2026. The short version: your journal is yours. We don't read it, mine it, profile you, train AI on it, or sell it — ever. With end-to-end encryption on, we can't read it even if we wanted to.
Solous ("Solous", "we", "us", "our") is a private life-journaling service. For the purposes of the EU/UK General Data Protection Regulation (GDPR), Solous is the data controller of the personal data described here.
Data-protection contact: contact@solous.live. We aim to answer any privacy request within 30 days.
We collect nothing else. No analytics scripts, no advertising pixels, no third-party trackers, no device fingerprinting, no data brokers.
Server logs. Our own web server records each request so we can tell whether the site is working and spot abuse. We deliberately keep the least that is still useful: your IP address is masked before it is written down (the last part is replaced with zeroes, so it identifies a rough network rather than you), anything you typed into a URL is dropped entirely — searching your own journal never reaches a log file — and cookies are never recorded, so a log can't be used to sign in as anyone. These logs are deleted after 14 days. They are never used to build a profile, and they are never shared.
One exception, stated plainly because it is a third party: the sign-up and password-reset pages load a bot check from Cloudflare (Turnstile). It exists to stop automated scripts from creating accounts and making us send email to people who never asked for it. Cloudflare sees your IP address and some browser characteristics in order to decide whether you're a robot. It is not an analytics or advertising product, it sets no tracking cookies, and it appears nowhere inside your journal — only on those two pages, before you have an account.
We only process your data to run the Service for you. Under the GDPR, our lawful bases are:
We do not use your data for advertising, profiling, automated decision-making with legal effect, or AI training.
We keep our vendors to a minimum. Your data is hosted on Amazon Web Services (AWS) in the United States, which stores and processes it strictly on our instructions as a data processor (compute, database, media storage, and transactional email delivery). We have no advertising or data-sharing partnerships of any kind, and we do not sell or rent your data.
We disclose data to authorities only when compelled by valid legal process, and only the minimum required. For end-to-end-encrypted content, what we can produce is ciphertext we cannot decrypt.
If you use Solous from outside the United States (including the EU/UK), your data is transferred to and processed in the US. Where required, such transfers rely on appropriate safeguards such as the Standard Contractual Clauses offered by our infrastructure provider.
Depending on where you live (including under the GDPR and the California CCPA/CPRA), you have some or all of these rights:
California residents: we do not sell or share your personal information (as those terms are defined by the CCPA/CPRA), and we do not use it for cross-context behavioral advertising.
To exercise any right, email contact@solous.live. If you are in the EU/UK and believe we have mishandled your data, you also have the right to lodge a complaint with your local data-protection supervisory authority.
Solous is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country, if higher) to create an account. We do not knowingly collect data from children under that age; if you believe a child has signed up, contact us and we will delete the account.
If a personal-data breach occurs that is likely to put your rights at risk, we will notify affected users and, where legally required, the relevant supervisory authority without undue delay.
We may update this policy; the "Last updated" date above always reflects the current version, and we will announce material changes in the Service.
Privacy questions or requests: contact@solous.live. See also our Terms of Service.