Documentation
How identity works here
Your identity is a key that exists only on your devices. Nobody else holds a copy — including us.
When you begin, your device generates a keypair and derives an identifier from the public half. The private half is encrypted at rest and never leaves the device it was made on. There is no copy on a server to be compelled, leaked or lost.
What that costs, honestly
Nobody can reset it for you. There is no "forgot my key" link, because such a link would mean somebody else could take your identity. Your recovery phrase is the only way back, which is why you are asked to write it down and why it is worth doing properly.
Why signing in sends you elsewhere
Keys are held at id.maatara.io and nowhere else. Browser storage is scoped to a single origin, so this app genuinely cannot read them — that is not a policy we apply, it is a boundary the browser enforces. Signing in takes you there, you approve the request, and what comes back is a short-lived signature scoped to this app. Not the key.
Which is why sealing work is different
Searching and verifying only need to know who you are, so a session is enough. Sealing your work means signing it, and a signature can only be made where the key is. That is what pairing a device is for.