Where notes live

Your corpus is a SQLite database inside your browser's own storage, on your device. There is no server copy. Settings › Storage names the exact mode the app is running in — it never pretends.

The modes

• OPFS — the normal mode on https and localhost: a real SQLite file in the browser's private file system.
• IndexedDB — plain-http origins (a phone on your LAN dev server): the database is snapshotted whole after each write settles.
• SQLite file — the Mac app: a real file at ~/Mindestro/mindestro.db, shared live with the MCP server. Nothing evicts a real file.
• Memory — nothing to persist with; a loud red warning, and nothing survives a reload.
• Read-only — another tab owns the saving; this tab reads a copy and says so.

Protected vs best-effort

Browser storage has two grades. Protected ("persisted") means the browser has promised not to delete this site's data under disk pressure. Best-effort — the default — means it may quietly wipe an origin's data to make room, no dialog, no trash. The app asks for protection at boot and again when you press "Ask for protection"; both Chrome and Safari are allowed to decline silently, so the app tells you when they do.

Safari has one harsher rule: script-writable storage is cleared for any site not opened in seven days — unless the site is installed to the Dock or home screen, which exempts it entirely.

Making loss impossible

1. Export the vault — a zip of plain markdown no browser can revoke. The bell reminds you when the corpus has changed and no export has followed.
2. Install to the Dock or home screen (Safari especially).
3. Press "Ask for protection" — free if granted, honest if not.