Essays
What encryption changes about what people write.
Encryption is always argued defensively: it protects data from theft, from a lost laptop, from a company breach. All true, all worth having, and all beside the more interesting effect.
The interesting effect is on the person writing. People record different things — and more honest things — when they are certain nobody else can read them.
The self-censorship nobody notices
Anyone keeping records in a shared or hosted system edits themselves, usually without deciding to. Not dramatically. They just leave out the thing that would look bad, or foolish, or that they would rather not explain.
In a collection, that is the overpay. The piece bought impulsively and regretted. The seller who was difficult. The valuation you privately think is optimistic. The watch bought during a bad year for reasons that had nothing to do with watches. All of it useful; none of it recorded, because a record somebody else might read is a record with an audience.
Why the omissions are the expensive ones
A record of only the flattering facts is a poor record. The overpay is exactly what a future you needs to know when the same seller reappears. The doubted valuation is exactly what an heir needs, because they will otherwise treat your optimistic figure as fact.
Documentation is meant to answer a question later. Editing it for an imagined reader removes the parts most likely to be asked about.
The threshold is certainty, not strength
What changes behavior is not the cipher. It is knowing, without having to reason about it, that there is no other copy and no other reader.
"Encrypted at rest, on servers we operate" does not clear that bar, and people sense it correctly — somebody could read it, under some circumstance, and the writing adjusts accordingly. "Nobody holds a key but you" does clear it, which is why the architecture is an editorial decision as much as a security one.
That is the argument for local-first that has nothing to do with threat models. It is not only about who can read your record. It is about whether the record is worth reading.
Where the software fits — and where it does not
Watch Vault Archive holds everything encrypted with a key nobody else has, which is the condition under which candid notes are worth writing. What that costs is absolute: no password reset, no recovery, no support route that ends in restored access. The same property that makes candor safe makes a forgotten passphrase final.
One thing worth doing today
Think of one true thing about a watch you own that you have never written down because it is slightly embarrassing — what you actually paid, what you think it is really worth, why you have not sold it.
Whether you can record that, comfortably, is a better test of your record-keeping than any feature list.
More essays · How your data is protected · Why local-first still matters