How it stays private
A list of what a family owns is the kind of thing a thief would pay for. So we built Tolabook to never be able to read it.
On your phone
Your list lives in your browser's own storage on your device. If you never turn on backup, it never leaves. There is no account, and we do not know you exist.
If you turn on backup
You choose a passphrase. Your phone uses it to lock your whole list into one sealed box, using AES-256-GCM encryption, and only then sends the box to us. Your passphrase is never sent. We cannot open the box, and neither could anyone who broke into our servers.
The box is padded so that its size does not give away how many things you own.
Exactly what we store
| We store | What it is |
|---|---|
| A scrambled Google ID | A one-way code made from the ID Google gives us. Not your name, email or photo. |
| The sealed box | Your list, locked. Unreadable without your passphrase or recovery code. |
| Locked copies of the key | The key to your box, locked by your passphrase and by your recovery code. |
| A sign-in record | A code that keeps you signed in for 30 days. It ends when you sign out. |
| The last saved time | So your devices know which copy is newest. |
What Google sees
Google tells us that it is you, and that is all. We ask for the smallest permission Google offers, so we do not get your email address or your name. Google never sees your list.
The limits, honestly
- Lose your passphrase and your recovery code, and your backup is gone for good. We cannot reset it. Anything still on your phone, and any file you saved, keeps working.
- Anyone holding your unlocked phone can open your locker, the same as your photos.
- A backup file you download is not locked. Keep it somewhere private.
- Valuing your gold needs today's rate, so your phone asks us for the rate. It does not tell us what it is valuing.
What is on these pages
No advertising, no analytics and no tracking scripts. Every font and script comes from our own site, and the browser is told to refuse anything else.
Leaving
You can download your whole list as a file at any time. Delete your account from inside your locker and the box and your record are removed from our servers straight away.