What Longhand stores, and what stays private.
Sign-in uses your email address and a magic link. Public pages show only the display name and page address you choose, never any part of your email. An optional writing city is stored only to set the side window; it is never shown on public pages.
Drafts and the event log are private to you. Nothing is public until you publish. Private pieces are reachable only by their link: never listed on your page, left out of sitemaps, and marked so search engines should not index them. Sign-in cookies stay on the main domain and are never shared with writers' subdomains.
Public pages show the text and the effort receipt only. There is no public replay. The event log is never served publicly. Keystroke timing is treated as sensitive: it is never sold, shared, or used for training, and it is deleted with the piece.
Longhand never fetches linked pages. A reference is only the address you typed. Published links open with rel="noopener nofollow ugc". The server makes no outbound requests for links in a piece.