Summary: For the most part, app.joplincloud.com
is a version of the mobile app compiled to run in a web browser. It's currently hosted as static HTML/JS on GitHub pages and stores data locally.
See also:
Data is stored locally.
Implementation details
- File system access: Relevant code
- Database access: Relevant code
- For the most part, data is stored using the Origin Private File System browser API (including the database, through
@sqlite.org/sqlite.wasm
.
The full sqlite database is stored locally, unencrypted (though I think this would be good to change!). At present, E2EE on desktop, mobile, and also web only encrypts data on the server and not locally.
Currently, the synchronized data is usually persisted after logging out. However, in Chrome and Chromium based browsers, the data should be discarded if the web app is run from an in-private browser tab (related: storage quotas and eviction criteria: MDN). (In Firefox in-private, it fails to load).