diff --git a/logo_concept.svg b/logo_concept.svg
new file mode 100644
index 0000000..c4baecd
--- /dev/null
+++ b/logo_concept.svg
@@ -0,0 +1,48 @@
+<svg viewBox="0 0 100 100" version="1.1" baseProfile="full" width="100" height="100" xmlns="http://www.w3.org/2000/svg">
+
+  <style>
+    .proxy-line {
+      stroke: #00C8F0;
+      stroke-width: 6;
+    }
+    .p-terminal {
+      fill: #4080FF;
+    }
+    .p {
+      stroke: #4080FF;
+      stroke-width: 6;
+    }
+    .b-terminal {
+      fill: #7D64E3;
+    }
+    .b {
+      stroke: #7D64E3;
+      stroke-width: 6;
+    }
+  </style>
+
+  <rect width="100%" height="100%" fill="#dadada" />
+
+  <line class="proxy-line" x1="40" y1="40" x2="60" y2="40" />
+
+  <circle class="b-terminal" cx="20" cy="20" r="6" />
+  <line class="b" x1="20" y1="20" x2="20" y2="60" />
+  <circle class="b-terminal" cx="20" cy="60" r="6" />
+
+  <line class="b" x1="20" y1="60" x2="40" y2="60" />
+
+  <circle class="b-terminal" cx="40" cy="40" r="6" />
+  <line class="b" x1="40" y1="40" x2="40" y2="60" />
+  <circle class="b-terminal" cx="40" cy="60" r="6" />
+  
+  <line class="p" x1="60" y1="40" x2="80" y2="40" />
+  <circle class="p-terminal" cx="80" cy="40" r="6" />
+  <circle class="p-terminal" cx="60" cy="40" r="6" />
+  <line class="p" x1="80" y1="40" x2="80" y2="60" />
+  <circle class="p-terminal" cx="80" cy="60" r="6" />
+  <line class="p" x1="80" y1="60" x2="60" y2="60" />
+  <circle class="p-terminal" cx="60" cy="60" r="6" />
+  <line class="p" x1="60" y1="60" x2="60" y2="80" />
+  <circle class="p-terminal" cx="60" cy="80" r="6" />
+
+</svg>
diff --git a/notes.md b/notes.md
index 8a439c1..24f277e 100644
--- a/notes.md
+++ b/notes.md
@@ -13,9 +13,6 @@
     is wrong when domain stuff breaks.
 * Built-in static file hosting
   * Client determines which directories are exposed
-* Password-protected tunnels
-* TCP tunnels
-  * Allow client to specify binding to addresses other than 127.0.0.1.
 * IPv6