Does Vellum collect any data about me?
No. It has no analytics or accounts. Like any website, its host (Cloudflare) receives the requests your browser makes to load the app.
What stays on your device, and what doesn’t.
Vellum is built so your pages never need to leave your device. Here is every way it uses the network, and what each host can see.
On your device
Your pages, attached files, the search index, version history, code outputs and assistant conversations are stored in your browser’s private storage for vellum.today, on this device. There is no Vellum account, and no Vellum server receives them.
What the hosts see
| When | Host | What it can see |
|---|---|---|
| You open Vellum or these help pages | vellum.today, served by Cloudflare’s edge network (static files only, no server code) | Like any web host: your IP address, browser and the files requested. Never your pages. |
| A code language or chart library loads (first use) | cdn.vellum.today (Cloudflare R2) | Which language or library was downloaded. Never your code or its results. |
| You turn on text recognition | Vellum (about 15 MB, once) | That the recognition files were downloaded. |
| You turn on the assistant | The model’s public host (Hugging Face and GitHub) | That a model was downloaded. Never your questions or pages. |
| A code cell reaches the web | The site the cell asks for, only if you allow it for that page | What any request to that site shows. Each request is logged under the cell. |
| You sync | Your own sync service (iCloud Drive, Dropbox, OneDrive, Syncthing) | Encrypted files: opaque names, padded sizes, timestamps. |
| You sync a paired phone or tablet | Vellum’s relay on Cloudflare (relay.vellum.today), which introduces the devices | Their IP addresses, when they connect, and sealed messages it can’t read. |
| Paired devices find a route | Cloudflare’s STUN server (can be turned off in Settings) | The device’s IP address. |
| Someone runs a notebook you shared | cdn.vellum.today, from their browser | Which languages their browser loaded. |
Cloudflare processes those requests under its own privacy policy. Vellum runs no server code of its own and keeps no logs.
No analytics, no tracking
Vellum has no analytics, no tracking scripts, no advertising and no cookies. These help pages have no scripts at all. Fonts and icons are served by Vellum itself, so pages make no requests to other sites.
Pages never load images from the web: a remote image shows as a chip until you choose to download it into the page.
You stay in control
- Download a full backup at any time, or export everything as Markdown files.
- Network access for code is off by default and granted per page; saved secrets are encrypted with a key that never leaves the device, and are never synced or exported.
- Clearing the browser’s site data for vellum.today deletes everything Vellum stored on that device.
Questions
Can Vellum read my pages?
No. They are stored on your device and, if you sync, encrypted with a passphrase only you know.