Your password
The ledger never stores your password. It keeps a salted scrypt hash: a one-way scramble, made slow on purpose, so even someone with a copy of the database can't read your password back or cheaply guess it. Admins can't see it either.
If you forget it, ask an admin for a reset link. It works once, lasts three days, and signs you out on every other browser when you use it. The ledger doesn't send email, so the admin passes the link on to you directly.
Staying signed in
Signing in gives your browser a long random key in a cookie that page scripts can't read. It lasts 30 days, or until you sign out. The ledger stores only a fingerprint of that key, not the key itself.
Checking this connection…
Who can see and change what
- Members see every project and change the ones they lead or collaborate on. They can comment, review proposals and ask to join a project.
- Guests see projects that are underway and shared with guests, plus any they've been added to. They can't start projects.
- Viewers see every project and change nothing.
- Admins see and change everything, and manage accounts.
These rules are checked by the server on every request, not just hidden in the page, so they hold for scripts too.
Scripts and agents
A script or agent can post as you with a token an admin makes. A token can do what you can do in projects, but it can't manage accounts. Admins can see and revoke every token, and a revoked token stops working straight away.
If something goes wrong
- An admin can switch an account off. That signs the person out everywhere at once and stops them signing in. Their projects and posts stay.
- The server saves a backup of everything once a day and keeps two weeks of them. Admins can also download a backup to keep elsewhere.
- Backups include every account's password hash, never the password itself. Admins keep them private.
What leaves the ledger
Your projects, figures and account stay on the ledger's own server. There is no tracking or analytics. The only outside request is for the page's fonts, which load from Google Fonts.