ADHDNotes
Your source material
Your Markdown notes and PDFs stay in folders you chose. The content never leaves the machine merely because it is opened, searched, highlighted, or organized in an Area. Removing a source from the registry never deletes its folder.
The local capture server
The desktop app exposes a bounded Fastify API on localhost:3666 so the browser extension can deliver Marks and Snips. It is a local bridge, not a hosted sync service. The desktop app must be open to receive the request.
When the network is used
Calendar providers use the network only after explicit connection and consent. Microsoft Graph data is read-only. macOS Internet Accounts uses EventKit. ADHDNotes does not write events back to a provider.
Credential handling
Microsoft authentication runs in the desktop process. Serialized token material is persisted only after OS-backed safeStorage encryption and never enters the renderer. There is no desktop client secret.
Derived local caches
Search passages live in a private SQLite FTS5 index. The cross-library annotation catalog is a separate rebuildable projection. PDF annotation records are app-owned user data because the original PDF is never changed; Markdown annotations remain in their source files.
Accounts and telemetry
The core app needs no ADHDNotes account. The site and app contain no product analytics or telemetry path. Provider accounts are optional integrations, isolated from library-source ownership.