Might be sensitive

midden checks what's in the heap for things that look like secrets: a password, a key, backup codes, a recovery phrase, a link that carries a token. It tells you, and you decide. You can move the item to the hoard, or say it's fine. It's a set of rules, not a model, and it can miss things. Nothing that isn't marked has been found to be safe.

What's checked

Everything in the heap, on every device, as it comes in and again when its text is read:

• a text item, by its words;
• a link, by its address;
• a picture or a recording, by the text read from it (its OCR text, its QR codes, its transcript), once that's been read. The phone reads none itself; it checks what the desktop read, when it arrives by sync.

Locked cards are skipped (they're in the hoard already), and so are notes on items, for now. The rules are the same ones Bring in uses before a dig (listed in Bring in), plus two for what a QR code says: a two-factor setup (otpauth://…secret=) and a Wi-Fi password (WIFI:…P:…). A note with a link in it is checked by the link too.

Strong and weak

Measured on 5,145 links from one person's browser history (October 2026): 118 were flagged, and most of them were a checkout's or a sign-in's token, most likely used up by the time anyone saves them. So each finding has a tier:

• Weak: a session id (sessionID=, session=), a sign-in code= on an OAuth path, a token= on a shop's checkout, cart or order page.
• Strong: everything else. A strong finding anywhere in a link wins over a weak one.

How it shows

• A strong one puts a strip across the top of its card: "might be sensitive", why, and to the hoard and it's fine. The heap's line counts it: "2 items might be sensitive. review".
• A weak one leaves its card alone. With no strong ones left, the line counts the weak ones, muted: "14 items might carry a used-up token. review".
• ✕ on the line puts it away until there are more.
• Review is a lens, like a dig's: a "might be sensitive" chip, the strong ones first. The weak ones are folded ("probably expired: 14 sign-in and checkout links…") until you show them, or say they're fine all at once. With no strong ones, review shows the weak ones straight away.
• is:sensitive in search finds both tiers, any time (desktop).
• To the hoard opens the card's move to the hoard, the same move as its ⋯ menu. On the phone it says to move it from the computer.
• It's fine puts it away for good, on every device. It's kept by the item's content hash, so a different item with the same words is the same item.
• A flagged link, strong or weak, is never fetched for its preview (Link previews).

Not marked yet: the map's cards, the opened item, and the links arrangement's rows. The strip is on the list's cards, on the desktop and the phone.

What's stored

Nothing about what was found. Findings are worked out from the item each time the heap loads (about 5 µs a link, measured), so a change to the rules applies to everything at once. What you said is fine is stored as the item's hash and a time, synced (as cleared in the change logs) and kept in backups.