Pumice · Cloudflare preview

Browse in cloud mode or explicitly download a local working copy for editing. Reload to change accounts or vaults, or renew an expired session.

Requests Google Drive read/write access, which Google grants across your Drive. Pumice restricts sync to reviewed Markdown/text edits and queued creation, rename, move and recoverable trash in the selected vault. Leave unchecked for reading and local-only editing.

Local working copy

CLOUD MODE

Download your notes once, edit on this device, then explicitly review and sync with Drive. Use this mode only when you are the sole editor. Manage sharing in Google Drive.

Downloaded notes and drafts remain on this device after sign-in expires. Reopening requires Google sign-in and vault access again. This is not an offline app launch. Images still load from Drive. Browser data can be deleted: export important work.

Preview limits: 2 MiB per note, 250 MiB of note text, 10,000 notes/folders. Actual browser space varies; download pauses on failure and can resume.

Pending edits are changes in active notes. Recovery history contains saved versions from earlier sessions; review and recover a version to include it in an explicit Drive sync. No active pending edits does not mean all recovery versions have been synced.

Review includes drafts opened or recovered in this tab. Conflicts never overwrite automatically. An uncertain upload must be checked again; if unresolved, export and inspect Drive.

New notes and folders

Create locally first. Review, then explicitly sync this queue to Drive. Pending items stay here until confirmed; then open them in Files. New items inherit their destination folder's access. No sharing permissions are changed.

Use the local working copy as sole editor. Names are checked before upload; Drive does not make concurrent same-name creation atomic. After sync starts, an operation is frozen until its outcome is confirmed.

Form text is protected only after Save locally succeeds. Queue limits: 1,000 operations, 2 MiB per note, 250 MiB total.

Export recovery bundle in Local working copy includes this queue. Confirmed entries remain as receipts; there is no automatic deletion.

Rename, move and trash

Save an operation locally, review current Drive metadata, then sync explicitly. Only one pending operation at a time. Finish or export pending note edits first. Names and locations change only after Drive confirmation. Existing links are not rewritten.

Trash is recoverable in Google Drive; only empty folders can be trashed here. Moves stay inside this vault and may inherit destination-folder access. Pumice never changes sharing settings.

Confirmed operations remain as receipts in the recovery export. After syncing, reopen notes from Files. No permanent deletion is available.