Local-first direction
The private journal will use on-device storage as the core experience.
Security
Clear boundaries before connected services.
The public website contains no journal storage, sign-in, database or tracking integration in this foundation release.
Least privilege
Future services will receive only the access needed for their distinct purpose.
No embedded secrets
Privileged credentials will never be shipped in browser or extension code.
Encrypted sync later
Optional sync will be treated as a dedicated security project, not a routine database feature.