Pocka / Privacy

Privacy, in plain words.

Updated November 7, 2026. Pocka is a short-lived shelf between your own devices.

What we store

• Your account: email, sign-in method (Google or email), and a salted hash of a login credential derived in your browser. We never receive your raw login password.
• Items on your shelf: the content, file name, type and size, until the item is taken, deleted or 24 hours pass. A folder is stored as a single zip.
• Sessions: a hashed session token for each signed-in device, for up to 30 days.

No ads, no tracking scripts, no analytics on your items.

Encryption

All traffic uses HTTPS. By default, items are stored on our servers without additional encryption, so the service can technically read them.

If you set a personal key (the key on the wall in the app), you can lock items. Locking is optional and chosen per item. A locked item’s name, type and content are encrypted in your browser with AES-256-GCM, using a key derived from your personal key (PBKDF2-SHA-256, 600,000 iterations). We only ever receive the encrypted result; its size stays visible to us.

A folder is packed into one zip in your browser before it is locked, so the file names and structure inside it are encrypted too.

To tell whether you typed your key correctly, we store a random salt and a short test value encrypted with your key. Your browser checks the key by opening that test value. The key itself never reaches us. As with any password, a short or common key could be guessed by someone holding a copy of the database, so choose a long one.

If you lose your personal key, locked items cannot be recovered by anyone.

Deletion

• Taking an item removes it from your shelf a few seconds later (the undo window).
• Untaken items expire after 24 hours and are cleared within about 15 minutes.
• Deleting your account removes your shelf and sessions immediately.
• File and text contents are stored in Cloudflare R2 and deleted together with the item; any copy a failed deletion leaves behind is removed automatically within 2 days.
• Item records (name, type, size and a short preview of a note, encrypted for locked items) and account data live in our database, whose provider keeps point-in-time backups for up to 7 days (Cloudflare D1). Deleted records may persist there until those backups roll over.

Who processes data

Pocka runs on Cloudflare (privacy policy). If you sign in with Google, Google confirms your identity and shares your email with us.

Your controls

In the app you can sign out other devices, delete any item and delete your account.