Privacy Policy
Effective October 10, 2026. Caldera is provided by mjonesone, LLC ("we", "us").
The short version
- Your Obsidian vault stays on your device. The Caldera plugin reads it locally and never uploads it.
- We only receive what you choose to publish, plus the messages you send through the hub. Notes you share with friends are end-to-end encrypted; we cannot read them.
- No ads, no analytics, no tracking cookies, and we do not sell or share your data.
- You can delete your profile and everything tied to it at any time, from inside Obsidian.
1. What the plugin does on your device
The Caldera plugin reads your vault on your own device to build your profile page: counts (notes, words, links, active days), the tags you allow-list, notes you mark caldera: public, journal fields you add, and counts you provide in Caldera/activity.json. This processing happens locally. The plugin sends data to a hub only when you publish, sync your inbox, or take an action (friend request, shared note, ask, offer, gravity). It contains no telemetry.
Your identity keys are generated on your device and stored in the plugin's settings file in your vault. We never receive your private keys.
2. What the Caldera Hub receives and stores
| Data | Why | Who can see it |
|---|---|---|
| Your published profile page and profile manifest (name, handle, headline, photos, links, the sections you switched on, daily counts and journal text you chose to publish) | To host your public profile | Anyone with the link |
| Your directory card (name, handle, headline, photo, top topics, weekly score) | To let people find you on the People page | Public, unless you switch off "List me in the directory" |
| Your public keys and handle | To verify your signed actions and let friends find you | Public |
| Friend requests and friendships | To connect you with friends | You and the other person; friend counts appear on profiles |
| Notes shared with friends ("cards") | To deliver them | Only the recipient. They are end-to-end encrypted; the hub stores ciphertext it cannot read |
| Asks, offers, gravity and help-credit records | To run the help exchange | Public asks and offers are public; gravity reasons are visible to the recipient |
| IP address | Rate limiting and abuse prevention | Held in memory only; not stored by the hub. Our web server's standard access logs keep IP and user agent for up to 14 days for security |
We do not collect your email address, phone number, contacts or payment information. We do not use cookies.
3. How we use it
Only to operate Caldera: hosting profiles, delivering messages, enforcing the help-exchange rules, showing leaderboards and search, and preventing abuse. We do not use your data for advertising, and we do not sell, rent or share it with third parties, except where required by law.
4. Your choices and rights
- Control what is public: every profile section has a switch, and you can preview before publishing.
- Update or remove content: republish at any time; the hub keeps only your latest page.
- Delete everything: in Obsidian, run Caldera: Delete my profile from the hub. This erases your page, profile, friendships, asks, offers, gravity, credits and stored messages from the hub. Copies already delivered to friends' vaults stay in their vaults.
- Access or questions: email privacy@caldera.social. Residents of California, the EU, the UK and other places with data-protection laws may have additional rights (access, correction, deletion, portability, objection); contact us and we will respond within 30 days.
5. Security
Every action is signed with your key and verified by the hub, so no one can act as you without it. Shared notes are encrypted end to end. Profile pages are served in a sandbox. Connections use HTTPS. No system is perfectly secure; keep your recovery key private.
6. Children
Caldera is not directed to children under 13 (under 16 in the EU and UK), and they may not use it.
7. Self-hosted hubs
Caldera is open source. If you use a hub run by someone else, that operator's privacy policy applies to it, not this one.
8. Changes
We will post updates here and change the effective date. Material changes will be announced on this site before they take effect.
9. Contact
mjonesone, LLC · privacy@caldera.social