Skip to content
Palarid
Menu

Trust

Releases

What each release changed for your privacy and security, which outside services came or went, and any data migrations — separately from the feature notes.

Security fixes are described after they ship, without details that would help anyone exploit an unfixed problem. Feed: changelog.xml.

v4.94.0 · 15 October 2026

A daily check-in, progress you can see, and gentle reminders

Privacy

  • Check-ins and reminder settings are stored only on this device (keys starting dc_) and included in backups. Reminders are shown by the browser on this device; nothing is sent.

v4.93.0 · 4 October 2026

New: Historical Maps

Privacy

  • The Historical Maps search sends only the words typed into its search box to the Library of Congress.

Outside services added

  • Library of Congress (www.loc.gov, tile.loc.gov) — Historical Maps images and map search, only when the tool is opened.

v4.92.2 · 4 October 2026

Palarid is free

Privacy

  • The Plus waiting list is closed and collects nothing. Existing entries are not used and can be deleted on request (privacy policy updated).

Policy updates

  • Refunds page: Palarid is free, nothing is sold, nothing to refund.

v4.91.0 · 29 September 2026

A proper front door, the app at /app, and missions that finish

Privacy

  • The homepage no longer loads the application; people with an existing workspace are sent to /app by a check of this browser's own storage (nothing sent).
  • Aggregate usage counts built but switched off; opt-in only, respects Global Privacy Control and Do Not Track.
  • Privacy policy transfer table corrected: removed four services no longer contacted.
  • Sample data never counts towards usage metrics.
  • The Plus interest form (Netlify Forms) is disclosed in the privacy policy, with how to have an entry deleted.

Security

  • Service worker registered from the site root so offline support installs for deep-link visitors.
  • The app document is no longer indexable and no longer claims the homepage as its canonical address.
  • Billing endpoints built with server-side entitlement and verified, idempotent webhooks — closed until launch.
  • Product and trust pages enforce a Content-Security-Policy that runs only Palarid's own scripts.
  • The app no longer uses inline event handlers; its policy allows its six inline script blocks by hash instead of 'unsafe-inline' (report-only until checked on the live site).
  • The release gate scans every file for anything shaped like a password, key or token.

Outside services added

  • Stripe (listed, not in use until Plus goes on sale)

Calculation updates

  • Salary-to-hourly bank-holiday question confirmed (fixed in v4.82, known-answer tested).
  • All tax thresholds read from one sourced table; rules are kept by tax year and future years stay draft.
  • Known-answer checks: 44 (was 17), generated into the public table.

Policy updates

  • Privacy policy reviewed 29 September 2026.

v4.90.0 · 28 September 2026

Every tool speaks, every delete can be undone, fewer duplicate lists

Data migrations

  • Mind & Money net worth (mn_nw) copied into Net Worth snapshots; source kept.
  • Reading Queue (rq_list) copied into Bookmarks tagged “to read”; source kept.

Policy updates

  • Accessibility statement: list updates now announced in all 133 tools.

v4.89.0 · 27 September 2026

Security and data-safety fixes, one capture, one reminder surface

Security

  • Hostile backup import hardened against stored XSS across every tool.
  • Optional encrypted backup export (AES-GCM, PBKDF2 600,000 iterations).

Data migrations

  • Anniversaries merged into Birthdays; Productivity habits merged into Habits; sources kept.

Releases before v4.89.0 were not classified this way; their notes, including corrections, are in the full changelog.