Your space. Your data.

App of Everything helps you organise your favourite websites into personal spaces. You do not need an account to get started.

Last updated: 20 October 2026

App of Everything is the service’s brand name. For account, data and privacy requests, contact: info@appofeverything.com.

Circles and shared posts

Circles are small invite-only shared spaces. Your chosen nickname, sources, notes, questions, replies and thanks are visible to members and stored on the server under your account ID. Personal spaces, open tabs and cookies are never shared automatically. Your email is not shown on post cards. Owners manage memberships and invitations. Viewers can read and save to their own Inbox; contributors can post. Posts remain after you leave; archive your own posts before leaving if needed. Archived posts can be restored from the circle archive. Removing the circle copy removes its posts and thanks from the server.

Your Where I left off reminder is private and syncs with dashboard data when signed in. Recent AoE spaces are kept only on this device; your browser history is never read.

Using the app without an account

Guest spaces, links and appearance preferences are saved in your browser storage. They do not automatically appear in another browser. Clearing browser data may remove your layout; use Import & backup to keep a copy.

Our main address is www.appofeverything.com. Guest spaces remaining on the address without www can be transferred with your explicit choice on the domain move screen. Different records are not overwritten without your selection. Transfer data is not sent in the URL or to the server; source tabs, cookies and Google sign-in sessions are not copied. Recover a guest board from the old address.

Accounts and sync across devices

Optional Google or email sign-in uses Firebase Authentication to manage your account ID, email address and display name when available. Firebase handles your password; App of Everything does not store passwords in its own database. Cloud sync requires a verified email address.

Your saved spaces, website addresses and preferences are stored in the server database under your account ID. Other users cannot see them. Only copies you explicitly share from Library or Workspace Share can be seen by people with their link. Layouts created with the previous ChatGPT sign-in remain associated with their separate account identity.

For the extension’s account-bound capture queue, the website creates a short-lived, single-use account proof. The extension verifies it only at the same App of Everything origin; your password and Firebase sign-in token are not given to the extension. The server stores hashes of the proof and account identity, document context, app origin and expiry. A proof expires after 60 seconds and is deleted on use; unused expired records are cleaned on the next proof issuance. Source-page contents and basket materials are not included in this request.

Split workspace

Your pane layout, notes and to-do lists are stored with your spaces and sync with the same account when signed in. Adding an external content pane connects your browser directly to that provider, which may use its own cookies and access rules. Sign-in fields in a direct iframe remain on the provider’s origin; the app does not scan the cookie database or saved passwords. Keystrokes you send through local video controls do pass through the temporary transfer path described below. Provider-managed content, such as Excalidraw drawings, is not included in our workspace sync.

To resume work, the Wikipedia article URL and reading position and the last eligible HTTPS URL of extension-connected panes are saved with your dashboard and follow existing account sync when signed in. Known temporary login/token redirects are skipped, keeping the previous regular address. This filter cannot identify every private link. Review included URLs before sharing a Capsule. Your general browsing history is not scanned.

Local browser extension

The extension requests more than viewing access: it can capture the connected source tab, read bounded content and send mouse or keyboard input. These capabilities depend on the app remaining secure. A compromised App of Everything workspace page or extension could misuse displayed content and these tools. Account namespaces, server access controls and local permission checks are not end-to-end encryption; they do not provide an absolute guarantee against an attacker controlling your device or trusted code.

The optional Local Workspace extension connects websites and search results you choose to real iframe panes and lets you collect selected text, links and images into baskets. Pane tools use packaged, isolated content scripts. Your general browsing history and cookie database are not read. Content you explicitly save and eligible continuation addresses follow the basket/dashboard storage and account-sync rules below; entire pages are not collected automatically.

The manifest includes fixed catalogue site access, activeTab, capture, debugger, storage, webNavigation and declarativeNetRequestWithHostAccess permissions. For an unlisted HTTPS destination, only the chosen origin and optional scripting permission are requested; all-site access is not granted automatically. Literal IP addresses and known local host names are rejected; DNS resolution to a private network is not independently verified. Version 0.2.62 does not remove entire CSP headers. It adds the required ancestor to frame-ancestors only for an approved site in an authenticated Workspace pane; other CSP directives and security headers remain. If X-Frame-Options is the only framing restriction, a narrow frame-ancestors policy is added instead of deleting it. Normal top-level visits are unaffected. Revoke site access in browser settings. A site's own verification or other policies may still prevent embedding.

When needed for iframe compatibility, the extension temporarily processes the site's original HTML response in memory on your device; HTML is not uploaded to our servers or stored persistently. The limit is 32 MiB per document and two simultaneous reads; oversized or timed-out responses stop without relaxing security. The source address, cookies and site code remain in the browser's original context. Chrome's debugging notice can remain visible while relevant panes are open; it is not hidden. The connection is released after the last relevant pane and any active screenshot operation close. Cancelling from the notice requires retrying the pane; video does not start automatically.

Video/control mode is a separate alternative you choose; an iframe delay does not start it automatically. In that mode, a requested source tab may open in the background and its live picture and mouse/keyboard input are processed on your computer, without our media relay or automatic recording. Unrelated tabs are not connected; browser debugging indicators remain visible. Explicit basket saving, image capture and transfer to an external AI are separate actions. A pane's stop control or the extension's disconnect action stops its connection. Reloading may reconnect it; source tabs can remain open as ordinary browser tabs. Remove the extension through the browser's extensions page.

Source tab IDs stay in the extension’s browser-session storage, scoped to the site origin and space/pane identity; they are not synced. Site dialog messages and your responses are relayed only to that source and are not stored. Panes in the same Chrome profile can share a source site’s cookies; a separate pane does not create an isolated account profile.

Local pane tools

Paste, drag-and-drop and file selection use only content you provide for that action. Selected file names, types and bytes, text and safe basic formatting are processed temporarily between the Workspace page and its source tab on your computer. Each transfer allows up to 8 files, 8 MiB per file and 12 MiB in total. These temporary copies are not added to our server, workspace sync or JSON/Capsule backups. Once a file is assigned to the source website’s field, that website may upload it immediately to its own server as it normally would; its policies apply. Folders, local filesystem access and unsupported pickers are handled by your own selection in the source tab.

Your operating-system clipboard is never read automatically. An explicit paste supplies content; Copy/Cut selection writes your chosen content to the operating-system clipboard where the browser allows it. Cutting deletes only from supported plain-text fields, after clipboard writing succeeds and while the selection remains unchanged. Accessible view retrieves a bounded set of main-document text and controls only on your request; password and text-entry values are omitted from that view. Paste/copy data, IME text, cut verification, accessibility and context-menu information stay only in application memory, outside our server and dashboard records. Content you copy to the operating-system clipboard follows your device’s own clipboard history and sync settings.

Sound controls mute or unmute only the relevant source tab on your device; microphone, camera, audio and video are not relayed through an App of Everything media server or recorded. Source websites use their own services for audio/video features, with permissions you grant. Motion view changes only local picture encoding. Native/sign-in windows opened by a source are tracked temporarily only through their opener relationship; OAuth and browser permissions are not bypassed. Text and keys entered through video controls are temporarily forwarded to the source tab, so this flow cannot be described as incapable of processing sign-in input. Returning through the extension icon does not close the source session. Normal website hosting and optional dashboard sync remain separate from these local tools.

Desktop mirroring and local files

Desktop mirroring shows a live view of the source you explicitly choose in your browser's sharing picker, on this device only. The web version cannot control the source application from this pane. Audio is not captured. The preview is not recorded, uploaded to our server or included in account sync. Stop sharing in the pane or browser. After reloading the page, grant sharing permission again; saved layouts keep only the pane name, scale and placement.

Selected local files are previewed read only in browser memory. File contents, names, local paths and access permissions are not sent to our server or included in backups. Select files again after closing the page. Pro screenshot and drawing tools are temporarily open for a free preview; no payment is processed. With the Local Workspace Chrome extension 0.1.5 or later, Screenshot saves only the Workspace area to your device as a PNG in one click. It uses the existing debugger connection on the requesting App of Everything tab, does not capture other tabs and does not upload the image to our server. The attachment remains while direct website panes use it, and is released after the last pane and capture close. The separate Capture tab alternative requires approval in the browser’s sharing picker. Drawings are included in space and layout saves and follow your existing space sync preferences when signed in.

Saved sources and workflows

Inbox items contain the URL, title, text you paste, your note, tags and optional space association. Workflows keep a name, space/layout association and the sites you choose to open together. They are part of your dashboard: local in guest mode, included in existing account sync and JSON backups when signed in. You can edit, archive and permanently delete archived items.

The extension stores the active HTTPS tab URL/title only when you invoke its icon or shortcut, plus text you enter in the form. It does not collect browsing history, cookies, passwords or whole pages. Up to 200 pending items remain in extension local storage. Without a chosen default, you import them manually in Saved sources. If you explicitly choose Save here in one click, later captures import automatically into that destination and follow existing account sync when signed in. The extension receives no email or session token: destinations are separated by a SHA-256 account identifier or browser-specific guest identifier, together with the site origin. Items do not auto-import into another account. The extension copy is removed after successful local-save confirmation. Uninstalling removes pending items and destination preferences.

Optional startup resume

In Chrome extension 0.1.8, Resume my last workflow on startup is off by default. Enabling it asks separately for optional tabs permission. This permits reading open tab URLs and titles on your device; the extension uses them only to match workflow addresses. The list of all open tabs is not uploaded to our server. Your last launched workflow ID, destination, source URLs, the last valid HTTPS addresses visited in those tracked tabs and closure status remain in extension local storage across browser restarts. Tab IDs are used within a browser session; after restarting, URLs are matched instead of trusting old IDs. This resume data does not sync to the cloud. Unrelated tab visits and browsing history are not recorded.

On startup, source websites do not open automatically until the correct account's data is ready. The extension does not close existing tabs or change their URLs; it may open missing workflow tabs. This feature does not save cookies, passwords, internal page state or live-capture approval. Turning it off in the extension clears the last workflow's resume data and removes optional tabs permission. Revoking access in browser settings also stops automatic resume. Uninstalling clears extension storage; manage previously imported website records separately in the website.

Service providers

OpenAI ChatGPT Sites hosts the website and Google Firebase provides authentication. These providers may process network requests and technical logs to operate and protect their services. Read more: OpenAI Privacy Policy, Firebase Privacy and Security.

Working with your own AI

In your personal workspace, My basket stores the links, text, note snapshots and image records you explicitly collect in named baskets. Basket names, Workspace references, dates, questions and text items are saved with your dashboard in the browser; when signed in, they use existing account sync and JSON backups. Screenshots stay in account-scoped IndexedDB on this browser; they are not sent to our server, analytics or JSON backups. Images may be unavailable on another device; clearing site data deletes them. Baskets are never automatically sent to AI.

Transfer basket to AI inserts selected text and PNG images into the connected ChatGPT chat draft; it never sends the message automatically. Images may upload to that external AI service during transfer and its terms apply. Copy request writes only text and source links to your clipboard; attach images yourself for other AI services. Response transfer reads only text you select. Responses saved as notes or tasks use the same storage and sync rules as other Workspace records. ChatGPT plan integration is not enabled.

Creating a sharing link is separate: a Workspace copy you explicitly approve is stored in our existing server storage and can be read without sign-in by anyone with the link. It may contain notes, tasks, source URLs, tool inputs and drawings; it excludes live sign-ins, local files, basket images and screenshots. You can revoke the link; previously retrieved copies cannot be recalled.

An updating Workspace link is a separate opt-in. With your explicit approval, the current and future shareable content of this Workspace updates the copy at the same link. While the page is open, changes are coalesced for five seconds; transferring to AI first saves the current copy. Unchanged content is not rewritten. Pausing updates leaves the last copy readable; revoking the link closes access. This does not give GPT continuous monitoring or access to your computer; GPT must reopen the link to retrieve changes. Link management state is held in the browser tab session, scoped to your account and Workspace.

Capsules, team spaces and on-device AI

Notes, tasks and values you enter in mini apps are excluded by default when creating a Capsule; you can choose to include them. Formula definitions and their default values travel with the package. Review the package before creating a share link. Anyone with that link can view the shared copy. Revoking a link in Library stops future access but cannot recall downloaded copies. Team copies are visible only to their owner and joined members. An owner creates a viewer or editor invite; anyone with that link can join with its assigned role. Invitations expire after 72 hours. Team content and member identities are stored in the service database.

Personal search indexes only content you explicitly saved. Automation rules run on your device while the app is open. Contextual AI gives only your selected records to a supported browser’s on-device model; they are not sent to our server or an AI API. The browser may download a model. If you copy the context and paste it into an external AI service yourself, that service’s terms apply.

When you enter a username and click Load repositories, your browser connects directly to the official GitHub API. It reads public repository names, descriptions and URLs only. A repository you save follows your existing Inbox storage and sync preferences.

Usage measurement and your choice

Aggregate traffic counting stores request totals by day, page section and approximate country only. No visitor or session identifier, account, raw IP, full URL, query text or content is written to this table. Reloads count again; this is not a unique-person count. Known bots are approximately filtered. Country comes from hosting infrastructure; VPNs and missing signals can affect it. Turn this count off in Measurement preferences. The aoe-traffic preference cookie contains no identifier and remembers only this choice for 90 days.

Optional detailed usage measurement starts only after explicitly choosing Accept in the first-visit dialog. Declining, closing or making no choice does not start detailed measurement or limit features. No account is required. Measurements cover only App of Everything section and tool counts, kit type, active time, theme, language, device class and technical connection states. Active time counts only while the page is visible, focused and has had activity in the last 90 seconds. Reloading opens a new measurement session.

We do not watch or record your screen. Messages, notes, files, drawings, search text, Workspace names and private external-site content are excluded from analytics. The detailed-measurement choice and a random browser identifier are kept in local storage; the identifier rotates at least every 30 days. Previous identifiers stay only in your browser until their retention window ends or erasure completes, so their records can still be deleted. Our database stores a daily-changing hash of that identifier, never joined to your name, email or account. These records are not described as fully anonymous; they may be pseudonymous usage data. Our analytics tables do not store raw IPs; the hosting provider's operational and security logs follow its own rules.

Analytics is processed solely to improve the service in our existing OpenAI Sites/Cloudflare database, without advertising profiles; only an authorised administrator can access reports. Reports show the last 30 days; older records are periodically cleaned during subsequent measurement or report requests. Change your decision in Help & settings → Measurement preferences. Declining requests deletion of this browser's detailed measurement records, retried after reconnecting if offline. A content-free deletion hash is retained for up to 32 days to prevent late requests from recreating records. Aggregate counts have no person-linked record, so an individual's past contribution cannot be separated from totals. Normal workspace saving and sharing you explicitly initiate are separate from measurement.

Registered-account counting is separate from usage analytics. The server stores verified account identity, sign-in provider, and first/last seen day; email, screens and workspace contents are not added to this counter. Existing cloud saves help count older accounts. This membership count is independent of analytics preference and is not linked to detailed usage sessions. The admin report exposes totals only.

Optional app and pairing observations

This is a separate, off-by-default choice. Only if you accept general usage measurement and explicitly enable this scope do we count successful additions of registered catalogue apps to favourites and app pairs saved together in a layout. Existing favourites and open tabs are not automatically scanned; activity inside external websites is not tracked. Custom and unrecognised links are omitted; some regional addresses share one canonical app identifier.

A page address is used on your device only to recognise a registered app; only fixed app identifiers and bounded counts are sent. Contents, screens, messages, notes, files, personal names, Workspace or layout names, full addresses, paths and queries are excluded. The payload has no account, visitor, browser or session identifier, country or timestamp. A random identifier for each small batch prevents counting the same submission twice and is not linked to a person. The server keeps totals by its own day.

The choice is remembered in this browser under app-insights-v1. The aoe-app-insights cookie only marks that this optional scope is enabled and contains no identity. Declining general usage measurement or turning this scope off stops future collection, discards counts not yet sent from this page and removes the preference cookie. Turning it off cannot separate your contribution from past totals that are not linked to a person, so we do not promise individual erasure of those aggregates.

App observations are reported as aggregates over the last 30 days. Only an authorised administrator can see apps and pairs with at least 10 observations in this fixed period; smaller counts and the number of suppressed rows are not exposed. These are not unique-person counts; one person can contribute several observations. Deduplication receipts are kept for at most 32 days. Administrator browsers are excluded. Our existing database processes these counts to improve app kits, without an external analytics SDK or advertising profiles.

Work Hub

Work Hub is a shared workspace separate from your personal dashboard. Shared notes, tasks, tab and eligible navigation URLs, layouts and basket text are stored in the service database; PNG images you explicitly add to shared baskets are stored in private object storage. Members access this content through their accounts. Website passwords, cookies and live login sessions are not transferred. These shared records are not end-to-end encrypted.

The owner sets invitation roles, per-person tab allowances and sync intervals. Only a hash of the invitation secret is stored on the server; a link can grant membership until rotated or disabled. Role downgrades and blocking are enforced by the server. Previously downloaded content and recovery files cannot be remotely recalled. Closing a room stops participant access and retains records for owner recovery.

Offline drafts are stored on this device by account and room. Changes to the same item do not silently overwrite one another; versions are kept for review. The latest 32 server commits are retained, capped at 4 MB. Recovery files may include local alternatives and images available on the device; review them before sharing. Each room stores up to 64 MB of images. Clearing browser site data can remove local recovery.

Visible text, images and links from supported Work Hub tabs are shown automatically to signed-in members connected to the room. The source stays on the tab owner's device; no screen or video recording is made. Password fields, form values, cookies, storage data and executing page code are not transferred. Personal information visible as ordinary page text can still be seen by members; use your personal Workspace for private work. When the tab owner enables collection, text and product links may be saved to the shared basket. A member holding shared editing access can follow supported links and scroll. Page data travels encrypted between devices over WebRTC and is not stored on our server. Items added to the basket follow shared-record storage rules. Short-lived connection messages, which may include IP addresses, are valid on the server for up to 60 seconds; expired entries are removed in bounded batches on later requests. Cloudflare STUN helps discover network addresses. Direct connections can expose your IP address to participants. No paid relay is used, so some networks may not connect. We cannot prevent members from making copies or recordings on their own devices.

The Work Hub voice room is separately optional and available only to signed-in room members. Microphone access is requested only when you choose Join audio. Audio travels encrypted between devices over WebRTC; we do not upload audio to our server or create call recordings. Participant names, mute status and short-lived connection information are processed to connect the call; audio levels and speaking indicators are calculated only on devices. Microphone selection, processing and listening preferences stay on this device, scoped to your account; they are not sent to the room or shared-work history. Direct connections may expose your IP address to other call participants. Mute or leave at any time. In push-to-talk mode, releasing the button or switching tabs mutes the microphone. Switching browser tabs keeps the call open; leaving the Hub or reloading the page ends it. The initial limit is four voice participants per room and does not change shared-work membership limits. Paid transfer is never enabled automatically. We cannot prevent other participants from recording on their own devices.

Your controls

You can edit or remove links and spaces in the app, and export your data as a JSON file. Signing out does not delete your cloud spaces; sign in with the same account to access them again. This version does not include advertising or marketing analytics integrations.

Deleting your account and cloud data

Start from Delete account and data in the account dialog. You can export a backup first. Deletion requires typing DELETE and, for Firebase accounts, verifying your identity again. Your personal cloud workspace, account registry entry, owned shares and Work Hub rooms and their images are deleted; your memberships and editing permissions in other rooms are removed. Shared documents in other people’s rooms and copies they downloaded are not deleted in full. Your own circle posts are redacted while other people’s replies are preserved.

For Google/email sign-in, the App of Everything Firebase account is also deleted; your Google account is not deleted. Legacy ChatGPT connections remove only App of Everything data and access, not your ChatGPT account. Open tabs in the same browser share the deletion state and stop old data being written back to the cloud. Account drafts and image caches in this browser are cleared. Local copies on other devices, in the extension or in downloaded files cannot be erased remotely; clear those separately. Detailed usage measurement is not linked to your account and has its own erasure choice under Help & settings → Measurement preferences.

An active upload or temporary service outage can leave deletion pending; retry with the same account until it finishes. Content-free room/erasure records and bounded retries clean up late image uploads. Limited erasure receipts prevent old sessions from recreating data; unfinished operations and disabled legacy account connections may require retaining this security record longer. These records contain no workspace content or email. Infrastructure providers’ security logs and backup lifecycles apply separately; we do not claim they are erased instantly.

Data rights and requests

Account and collaboration data comes from your browser, sign-in provider and in-app actions to deliver and secure the service you choose. Optional detailed usage measurement requires a separate choice that you can withdraw. Where applicable, Turkey’s Law No. 6698 (KVKK) and the GDPR provide rights to information, access, correction, erasure, objection, restriction and data portability, subject to their respective conditions. This page is not a certification of complete legal compliance.

Send requests to the email address below. Share only what is necessary to describe your request and verify the correct account; do not send passwords, sign-in codes or unnecessary identity-document copies. Requests are assessed under the applicable legal conditions and deadlines. Your right to complain to the KVKK or competent data protection authority remains available through the applicable procedure. KVKK · GDPR

Contact

For questions about your account, data or privacy, contact us at info@appofeverything.com.