Slate

Last updated 14 November 2026

Privacy

Slate is a private workspace. This page explains, in plain words, what the hosted version at slate.noman.io stores, where it lives, who can see it, and how to get it deleted. Slate is open source, so you can also check all of this in the code.

Questions or requests about your account or data?Send a message

The short version

  • Your pages, databases and playbooks are visible only to your account.
  • No ads, no analytics, no tracking, and nothing is sold or shared for marketing.
  • The only cookies are the ones that keep you signed in.
  • You can delete your workspaces any time, and ask for your whole account to be deleted.

What Slate stores

  • Your account: your email address and a securely hashed password. Your display name starts as the part of your email before the @.
  • Your content: workspaces, pages, databases and their records, playbooks and their run history (inputs and answers), and images you upload.
  • Messages you send us through the contact form: your email, the topic and the message, and which account sent it if you were signed in. They're used only to answer you.
  • Agent keys: the name you give each key and when it was last used. The key itself isn't stored, only a fingerprint of it.
  • In your browser: sign-in cookies, plus a few preferences (theme, sidebar, recently used icons) and unsaved edits waiting to sync, kept in your browser's local storage.

Where it lives

  • Supabase stores your account, content and uploads in its database and file storage, hosted in the United States.
  • Cloudflare runs the app and handles every request. Like most hosts it keeps short-lived request logs (such as addresses and times) to keep the service running and protected.
  • An email provider sends the messages you ask for, such as sign-up confirmation and password reset.

These services process data only to run Slate for you.

When data leaves Slate

  • Playbook API steps send requests to the addresses you set in them, with the values you fill in, and keep the response in the run's history. Header values marked as secret are hidden in run history and links.
  • AI agents can read your workspace only with a key you create. A key you create with “Read and create” also lets an agent add new pages, databases and playbooks; agents never edit or delete what's there. What an agent does with what it reads is up to that agent's provider (for example Anthropic or OpenAI) and their policies. Revoke a key in Settings › AI agents to stop access.

Who can see your content

Only you. There is no sharing, no public pages and no team access; the database itself enforces that each account can reach only its own data. As the person running Slate, I could technically access the database, but I don't look at anyone's content unless you ask me to (for example to help with a problem) or the law requires it.

Keeping and deleting your data

  • Your data stays until you delete it. Pages you delete go to Trash first, where you can restore or delete them for good.
  • You can delete a workspace and everything in it from Settings.
  • To delete your whole account, or to get a copy of your data, send a request, ideally while signed in, so it's clear it comes from you. You can also export any page as Markdown and any database as CSV yourself.
  • Deleted data can remain in backups for a short time before they expire.

Changes and contact

If this page changes, the date at the top changes too, and the history is public in the repository. For any question about privacy or your data, send a message. Bugs and ideas are welcome as GitHub issues; security problems, please report privately as described in the security policy.

Running your own copy of Slate? This page describes the hosted version. Update it, and the contact address settings in src/lib/project.ts, to match yours. Slate is licensed under the AGPL-3.0.