Privacy Policy
Updated September 2026
InkDrafts connects Notion and GitHub. It creates a website repository in your GitHub account and keeps it in sync with your Notion pages. This policy describes what the service keeps and for how long. It matches the public code in inkdrafts/notiongit.
Summary
- InkDrafts keeps no copy of your Notion or GitHub access tokens.
- Setup records delete themselves within 24 hours.
- No advertising, no trackers, no data selling, no third-party analytics.
- Your repository, content, and published site are yours and stay with you.
What InkDrafts keeps, and for how long
| Record | Contents | Kept for |
|---|---|---|
| Setup record | Your GitHub account id, login, account type, the App installation id, your repository's name and URL, and the outcome of each setup step. It is tied to a random job id, not to any InkDrafts account. | 24 hours after the last update, then deleted automatically. This includes finished and failed setups. |
| Template validation record | Property names, property types, and select options of the Pages and Posts databases in the Notion template you duplicated. InkDrafts reads this to verify the template was duplicated correctly. No page content is in it. | 24 hours. Reconnecting Notion replaces it. |
| Operational metrics | Step names, outcomes, error codes, and durations for each setup, correlated only by the random job id. No account name, no repository name, no content. | Written to operational logs kept for at most three days. InkDrafts keeps no long-lived aggregate of them. |
| Abuse controls | Short-lived counters that keep someone from starting many setups at once. A counter contains a GitHub account id or a keyed hash of your network address, never the address itself. | From one minute up to seven days with the deployed configuration. |
| Dashboard session | If you sign in to your dashboard, a cookie carries your GitHub login and account id. The dashboard re-derives your site's state from GitHub on every visit. InkDrafts stores no account-to-site binding. | 8 hours, or until you sign out of the dashboard. |
Access tokens
Your GitHub authorization is used inside a single request to create your repository, then discarded. InkDrafts never stores a GitHub access token.
Your Notion token is written once into your own repository's Actions secrets, for the sync workflow inside your repository to use. The value is sealed with libsodium encryption against your repository's public key before GitHub stores it. InkDrafts keeps no copy. Revoking the InkDrafts connection in Notion makes the stored token invalid. See Leaving InkDrafts for the steps.
Cookies
InkDrafts sets three cookies in total. None of them tracks you across other sites, and there are no advertising or analytics cookies.
- Two short-lived state cookies protect the Notion connection and the dashboard sign-in against tampering and replay. They are cleared when the authorization completes and expire within minutes regardless.
- The dashboard session cookie described above, which lasts 8 hours.
What InkDrafts never does
- It never shows you advertising and never sells data.
- It never reads your Notion page content. Your page content is read by the sync workflow inside your own repository, not by InkDrafts.
- It never edits your content after setup. Syncing is performed by the GitHub Action inside your repository; the only thing InkDrafts can still start is a sync run you ask for from the dashboard.
- It never asks you for a password, token, or secret. No one from InkDrafts will ever need one.
Removing your data
Setup records delete themselves after 24 hours. To disconnect InkDrafts from your accounts, or to delete your site entirely, follow Leaving InkDrafts. Questions and data requests go through Support.
Changes to this policy
This policy describes what the service's public code actually does. If the behavior changes, this page changes with it, and the full history of this page is public in the repository. Material changes are announced on the landing page.