A good librarian works for her reader and no one else. Here that isn't a promise we're making — it's the architecture.
The short version
Abigail is local-first. The memory she keeps for you lives on your own hardware — never on ours. There's no Abigail account and no Abigail cloud. Browsing this website and downloading her asks you for nothing: no email, no sign-up, no form. There is one exception, and it is your choice: if you buy a founding wish, we keep a small record of the purchase. It is described under Buying a founding wish below.
The app (Abigail on your machine)
Everything Abigail remembers is stored on your device. We don't receive it, see it, or back it up.
There is no account to create and nothing to log in to. Abigail doesn't phone home with your notes.
To do her job in your browser, Abigail's companion does read the page you're on — what you're typing, and the reply that came back — because that is how she notices what's worth keeping. And when she has something relevant, she adds it to your message before you send it. We'd rather say that plainly than hide behind "she's just a layer beside it".
What she never does is send any of it to us. Everything she reads is handed straight to the copy of Abigail on your own machine and nowhere else — there is no Abigail server to receive it. Your conversation still goes to your AI and only your AI, exactly as it always did.
The app may check for its own software updates. That request carries no memory of yours.
Downloading her (this website)
Downloading has no form. We don't ask for your email, and downloading puts you on no list. (Buying a founding wish is different: see below.)
We do count downloads. A click on a download button writes down the filename you asked for, a scrambled fingerprint of your IP address, the first 80 characters of your browser's user-agent, and your country — plus the date and a row number. It exists so we can tell whether anyone is taking her home and which platform they need.
On that fingerprint, the honest version: your actual IP address is never written down, but the scrambling is a fingerprint, not a vault — someone determined, holding our source code, could work backwards from it. We're telling you because a privacy page that oversells its own maths isn't worth reading. It is only ever used to tell one download from two.
We do not set a cookie or a download identifier, and none of it is or can be linked to you, to a purchase, or to anything Abigail later remembers. If the counter ever fails, your download still works — it was built that way on purpose.
The files themselves come from our host at cdn.abigail.fyi, which runs on Cloudflare. As with any download anywhere, Cloudflare handles the ordinary request data that makes a file transfer work.
Buying a founding wish (this website)
This is the only place this site collects personal information, and only if you buy.
Payment is PayPal's. You pay on PayPal's own buttons. We never see your card or your PayPal login. When the payment completes, PayPal's checkout hands your browser your PayPal email address and first name, and your browser sends them to us along with the PayPal order ID.
What we keep. One row in our database per purchase: your email address (lower-cased), your first name if PayPal gave one, the PayPal order ID, the price paid, your founding number, a receipt code, the date, and a copy of the signed key file we sent you.
Where. In a database on Cloudflare (D1), the same host that serves this site. The email carrying your key is sent through Resend, our email service, so Resend handles your address and the message to deliver it.
Why. To send you your key, and to re-send the identical key if you lose it and write to us with your order ID. We don't use it for a mailing list or marketing, and we don't sell or share it.
What is inside the key file. Your founding number, the price, the date, and a one-way fingerprint (SHA-256) of your email address — not the address itself. It lives on your machine; Abigail checks it there, without contacting us.
Kept until you ask us to erase it. Write to hello@abigail.fyi from the address you bought with, or quote your order ID, and we'll erase your email address and first name from your row. The rest of the row stays: the order ID, price, founding number, receipt code and date, plus our copy of the signed key file (which holds only the one-way fingerprint of your address, never the address). We keep it so the count of founding wishes stays true: deleting a row would reopen a place among the twenty and could hand your number to someone else. Once your address is erased we can no longer re-send your key. PayPal keeps its own record of the payment under its own terms; we can't erase that.
Analytics & cookies
This site sets no tracking cookies. If we measure traffic, it's with Cloudflare Web Analytics, which is privacy-first: aggregate page counts only, no cookies, no cross-site profile of you, no personal data.
Children
Abigail isn't directed at children under 13, and we don't knowingly collect their information.
Changes
If this policy changes, we'll update the date at the top of this page. Unless you bought a founding wish we hold no email address for you, so this page is the only place it will be announced — it's worth a look if you care.