Privacy Policy

What stays on your Mac

Quill stores the following data locally in ~/Library/Application Support/Quill/:

• credentials.json — your WordPress site URL, username, and Application Password. Stored as a plain JSON file with restricted permissions (chmod 600). Quill deliberately does not use the macOS system keychain to avoid password prompts when the app relaunches.
• ai_settings.json — your Anthropic API key, the posts you chose as style samples, the style guide generated from them, and your AI preferences (if you use the AI writing features), also chmod 600.
• site_profiles.json — your site's name and site icon, so they show while you're offline, also chmod 600.
• drafts.db — a SQLite database of drafts you've started but not yet saved to WordPress, autosaved versions of posts and pages you're editing, and a copy of your site's categories and tags. It is not synced anywhere.

macOS also keeps a few files for Quill in your Library folder: a preferences file with window sizes, the sidebar width, your site's address, and any update you chose to skip; and caches of images and web content the editor has loaded. They are listed under Deleting your data.

What Quill sends over the network

Quill connects to three places:

1. Your WordPress site
Every read and write operation (loading posts, saving drafts, publishing, uploading media) goes directly to your WordPress site's REST API using the credentials you provide. Quill is the client; your site is the server. No third party is involved in this traffic. Images in a post load from wherever they are hosted, which is usually your own site.

When you connect, Quill reads your site's public REST API index and loads its site icon, which may be hosted elsewhere, such as on a CDN. It then opens your browser to your site's approval page. WordPress names the Application Password it creates after your Mac, so your Mac's name appears on your WordPress profile. Each time Quill opens, it reads your site's name and icon address again, and downloads the icon only if that address has changed. Icon downloads send no credentials.

2. GitHub, to check for updates
When Quill opens, it asks GitHub for the version number of the latest Quill release, so it can tell you when an update is available. The request contains nothing about you, your site, or your posts. Like any web request, it shows GitHub your IP address, the app version, and your system version, and is covered by GitHub's privacy statement.

3. Anthropic's API (optional)
AI features work only after you add your own Anthropic API key. Quill has no built-in key and makes no AI calls without one. Quill asks Anthropic for the list of models your key can use when you add a key, each time you open Settings, and when Quill opens if it doesn't have the list yet; that request contains only the key. When you use an AI feature, Quill sends Anthropic:

• the text you selected, or the whole list or table it is in, along with the post's title, the rest of the paragraph and the paragraphs on either side, when you ask Quill to rewrite it;
• the description you type when you generate a post;
• the post's title, full text, footnotes and publish date when you evaluate a post;
• the full text of your style sample posts when you generate a style guide;
• your style guide, if you have one, whenever Quill writes, rewrites or reviews your text.

If you turn on Web Search, Anthropic may search the web for your topic while generating a post, and to check the facts in a post you evaluate. Quill does not contact any search engine itself. Everything sent to Anthropic uses your own API key and is subject to Anthropic's privacy policy.

What Quill never does

Deleting your data

To remove everything Quill stores on your Mac:

• Quit Quill.
• Delete ~/Library/Application Support/Quill/ — this removes credentials, AI settings, your site's name and icon, and the local draft database.
• Delete ~/Library/Preferences/com.siolon.quill.plist, ~/Library/Caches/com.siolon.quill, ~/Library/WebKit/com.siolon.quill, and ~/Library/HTTPStorages/com.siolon.quill.
• Delete Quill.app from your Applications folder.

Deleting these files does not revoke Quill's access to your site. To do that, delete its Application Passwords in WordPress under Users → Profile. Each browser connection creates one named "Quill on" followed by your Mac's name, so there may be more than one.

Contact

Questions or concerns? Open an issue at github.com/cpoteet/Quill, or email cpoteet@siolon.com for anything you'd rather not post publicly.