Privacy notice
Last updated 1 October 2026.
Q is designed so that your records stay with you. This notice says, plainly, what that means and the few things that do pass through our servers.
Who we are
Q is provided by Dark Olive CIC, a community interest company registered in England and Wales. For the few things below, Dark Olive CIC is the data controller. You can reach us through the contact page.
What Q does not collect
- No account and no password. You sign in with a passkey, which never leaves your device.
- No database of people. Your keys, your identity and your records are kept on your device, and in any cloud folder you choose to connect — encrypted before they leave your device.
- No cookies, no analytics, no advertising and no trackers.
What passes through our servers, and why
- Stay in touch and Contact. If you give us your email address or send a message, it is emailed once to Dark Olive CIC's admin inbox so we can reply. It is not stored on Q's servers; it is kept in that inbox for as long as the conversation needs, and deleted on request.
- Sign-in and notice emails. If you ask Q to email you (for example a sign-in link), the address is used to send that email. Q keeps the address only in a sealed form that you hold.
- Google Drive, if you connect it. Q exchanges Google's sign-in codes for access through our server and keeps nothing; Q can only reach the files and folder it made in your Drive.
- Calls. Calls go directly between devices. To find that direct route, your device asks a public STUN server (Cloudflare's or Google's), which sees your IP address and nothing else. Where a network blocks direct calls, the call is connected through a switchboard (a TURN relay), still encrypted, with short-lived credentials; the switchboard cannot read it, and its logs never hold your identity.
- Hosting logs. Like any website, our host records requests — the page asked for, the time and your IP address — to keep the service running and secure. These logs are kept briefly.
Who helps us
- Vercel hosts Q.
- Resend sends Q's emails.
- Cloudflare and Google help a call find a direct route (STUN). Calls that cannot connect directly go through our own switchboard, or Cloudflare's.
- Hetzner, in Finland, runs our node: the bellboy that tells your Q something is waiting, the storage that holds sealed things until you collect them, the directory, and the switchboard. What it holds for you is sealed so it can't read it; the directory holds only what is published on purpose.
- Google again, for your Drive, only if you connect it yourself.
Some of these providers may process data outside the UK, under their own safeguards.
Your rights
Under UK data protection law you can ask to see, correct or delete what we hold about you, or object to how it is used. Most of what Q holds is already in your hands: Leave no trace clears everything Q kept in your browser. For anything else, contact us. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office.