Privacy Policy

Updated 7 October 2026

This page describes how Handshake Portal handles data in its account, workspace and connected-provider workflows.

Account and workspace data

The portal stores your login email, password hash, account and profile identifiers, profile preferences, notes, tasks, tags, feed subscriptions and acquired feed content. Private and Work are separate account-owned profile contexts.

A session cookie authenticates your access. Edited notes can also be stored in your browser for synchronization and recovery. Saved note versions and their native editing checkpoints are stored in Forgejo.

Connected providers

When you connect a provider, the portal stores connection identity, status and access metadata. Provider access credentials are encrypted and bound to your account and selected profile; encryption keys are stored separately from the database.

The supported authorization flows request read access to provider identity and supported content: YouTube subscriptions, Pinterest boards and pins, TikTok account information and videos, or Instagram professional account information and associated page access. The provider authorization page shows the requested permissions. The portal uses authorized access to verify the connection and acquire selected supported content.

If you explicitly import an Instagram session through the optional session workflow, its session credentials are stored in the encrypted connection vault. This workflow is separate from provider OAuth authorization.

Disconnecting and removing content

Disconnect in Connected accounts removes the locally stored connection credentials and attempts provider-side revocation where supported. The displayed result explains whether you also need to remove access in the provider’s settings. Connection metadata and already imported content remain after disconnecting.

Existing workspace controls delete active notes, tasks and feed sources. These actions do not promise removal of historical note revisions, native journals, imported feed items, backups or browser recovery copies.

Questions and other removal requests

Contact the person who provided your portal access for questions about your account or removal of stored data beyond the available controls.