How Sync Works
SpudSuite syncs your data to your own cloud storage. We never see it, store it, or have access to it. Here's how.
Your notes go directly from your device to your cloud storage. SpudSuite has no servers that store your data. Zero-knowledge architecture means we literally cannot read your notes.
The Architecture
SpudSuite is local-first:
- Local storage: All your data lives on your device first (IndexedDB in browsers, app storage on mobile/desktop)
- Background sync: Changes push to your cloud storage automatically
- Pull on open: When you open SpudSuite, it fetches any remote changes
- Conflict resolution: If two devices edited the same item, we merge intelligently
Supported Cloud Providers
| Provider | Status | Auth Method | Best For |
|---|---|---|---|
| Google Drive | Available | OAuth2 | Cross-platform users |
| Dropbox | Available | OAuth2 PKCE | Cross-platform users |
What Gets Synced
- Notes (content, title, metadata)
- Folders structure
- Tags and labels
- Todos and todo lists
- Kanban boards and cards
- Projects and their associations
- Settings and preferences
- Pro status
Where Data is Stored
SpudSuite creates a folder in your cloud storage:
Google Drive: App Data folder (hidden, app-specific)
Dropbox: /Apps/SpudSuite/Files are stored as JSON. Your data is yours — you own it completely.
Sync Frequency
- Real-time: Changes sync within seconds when online
- Offline: Changes queue locally and sync when you reconnect
- Manual: Click the sync icon to force a sync at any time
Conflict Resolution
If you edit the same note on two devices before they sync:
- SpudSuite detects the conflict
- By default, last-write-wins — the most recent edit is kept
- If both edits are very close together, you'll see a conflict banner
- Click the banner to view both versions and choose which to keep
Conflicts are rare. They only happen if you edit the exact same item on two devices while both are offline.
OAuth and Security
When you connect a cloud provider:
- You're redirected to Google/Dropbox login (not our servers)
- You authorize SpudSuite to access only its app folder
- We receive an access token stored locally on your device
- The token is used to read/write directly to your cloud
SpudSuite requests minimal permissions:
- Google Drive:
drive.appfolder(app-specific folder only) - Dropbox: App folder only (OAuth2 PKCE flow)
We cannot see your other files. Ever.
Sync Requirement
To protect your data, SpudSuite encourages you to connect cloud sync:
- After 12 hours: A gentle reminder — "Secure your spuds". Dismissible.
- After 24 hours: A stronger nudge — "Your spuds are unprotected!". Dismissible.
- After 48 hours: Sync becomes required. You'll need to connect a cloud provider to continue creating new content. Your existing data remains accessible.
Without cloud sync, your data exists only on your current device. If you clear browser data or switch devices, it could be lost. Connecting sync protects you from data loss.
We've seen too many users lose their notes by clearing browser data or switching devices. Requiring sync after 48 hours protects everyone's data. You still choose where your data goes — Google Drive or Dropbox.
Account Button
Once connected, the account button appears in the top-right corner of the app. Click it to see:
- Your connected account (name and email)
- Settings shortcut
- Logout option (disconnects sync)
Disconnecting
To stop syncing:
- Click the account button in the top-right
- Click Logout, or go to Settings and click Disconnect
- Your local data stays. Cloud data stays. They just stop talking.
Note: After disconnecting, the sync requirement timer continues. You'll be prompted to reconnect if more than 48 hours have passed since you first used SpudSuite.
To delete cloud data, manually remove the SpudSuite folder from your cloud storage.