Privacy

parts cowork does not collect what you write. There is no server that receives your journal, no account, no analytics, no advertising, no tracking and no AI. The web host sees what every web host sees: an internet address and which page was asked for.

What is kept, and where

Everything you write or make is kept in this browser, on this device, and nowhere else:

your journal, parts, maps, Party Line rooms and settings, in the browser's local storage;
pictures you add for your parts, channels you make, and voice clips you record, in the browser's own database;
if you seal for a therapist: their practice code and the name you gave, so you need not paste them again;
on the For therapists page, if you use it: the practice key, which cannot be copied out of the browser except as the one locked backup offered when it is made, and the sheets clients sealed to it, sealed again under a key this browser holds, so nothing is in plain text in its storage (anything running on that page could still open them, as the page itself does to show them). Safari cannot keep the practice key locked away, so there it is kept sealed under that second key instead, and anything running on the page could read the key out, not only use it; the page says so when it happens;
also on that page: your own notes on each client, as drafts or signed and locked, sealed under the same browser key as the sheets;
which tracks you opened and when, and the walks you starred, in this browser only: a locked copy and your other devices do not carry them;
which background scene was showing, and a mad lib you are in the middle of, for this tab only, gone when the tab closes.

The microphone is used only while you record a voice clip, and only after the browser asks you. The clip stays on this device.

What leaves the device

Only what you take out yourself:

A locked copy, as a file or a restore link. It is locked in your browser with a passphrase you choose before it goes anywhere, so whatever stores it, an inbox or a notes app, holds scrambled text. A restore link carries the copy after the #, the part of a web address that browsers do not send to any server.
A spreadsheet you download or copy from the Your data page. That one is not locked: it is plain text, for you to open in a sheet.
A sealed stretch for your therapist, from Bring to session: a few days of your journal, sealed in your browser to the practice code they gave you, as a file or text you send them yourself. Only their practice key can open it. Your name, the dates and their name are all inside the seal: the file's name and its first lines are the same for everyone, so whatever carries it sees a file of about its size and nothing more.
Notes for your records, from the For therapists page, if you take them: your signed notes as a zip of PDFs, a folder per client, under the name or record number you type for each; or one note copied as text under SOAP, DAP or BIRP headings. Neither is locked: they are plain files and text for your records system, so keep them as you keep your other records. What you type for a client's name goes into the file and is not kept here.
A note you send from Send a note, if you write one: what you type in that form, and a reply address if you give one, emailed to the person who made this app, where it sits in their inbox. This site keeps no copy of it, and it is not locked, so keep your journal out of it unless you mean to share it.
A link asking a friend for words, from the mad lib, if you send one: it names which kinds of word to ask (an animal, a colour, a room) and nothing else, not the story, your parts or anything you wrote. The link your friend sends back holds only the words they typed. Both travel in the part of the address after #, which a browser does not send to any server, ours included; whatever carries the link can read it. The mad lib waiting on the words stays in this browser until they come back or you forget it. A card saved from the mad lib's reveal is a picture of the words you gave and the animal's figure, with no part name on it.

Nothing is sent anywhere in the background: the code fetches only the app's own files. The build fails if a page links to or loads a file from another site. The crisis links in Help go to other sites when you tap them.

Check it yourself: how to watch this with your browser's own tools, or with airplane mode on.

The host

partscowork.com is served by Cloudflare. Like any website's host, it sees an internet address and which page was asked for, and keeps its ordinary request records. The app adds nothing to that, its own logging is switched off, and nothing you write is part of it.

Taking it all off

"Forget everything on this device", on the Your data page in Settings, deletes all of it: storage, pictures, channels, voices and settings, and on the For therapists page the practice, its clients' sheets and your notes. It cannot be undone, and nobody can recover it afterwards, because nobody else ever had a copy. Clearing this browser's site data does the same, which is why the home page sometimes asks you to keep a locked copy.

Updated 29 October 2026. What this is, and is not.