Last updated: [date]

Privacy

Short version: we can’t read your notes, and we keep as little as possible.

What we can’t see

Notes and files are encrypted in your browser with AES-256-GCM before they are sent. The key is in the part of the link after the #, which browsers never send to servers. We store only the encrypted data and cannot decrypt it. If you add a password, it never leaves your device either.

What we store, and for how long

• The encrypted note, until it is read the number of times you chose, it expires, or you destroy it.
• Technical details needed to deliver it: creation and expiry time, view count, a random salt and hashes used to check access.
• If you ask for a read receipt: your email address and the reference name you typed. They are deleted together with the note.

Deleted notes are removed immediately. Expired notes are purged at least every hour.

What we don’t do

• No accounts, and no third-party scripts, fonts or trackers on any page that shows or handles a note.
• We don’t keep your IP address with notes. Our hosting provider (Cloudflare) processes IP addresses briefly for security and rate limiting.

Ads

The free service is paid for by ads. Notes are written, shown and managed on a separate secure site (secure.[yourbrand]) that loads no third-party code at all, and your browser stops ads on the main site from seeing inside it. Ads there are our own images and cards; clicking one goes through our server so we can count it.

The main site may show Google AdSense and other ad networks, which can use cookies according to the choices you make in the consent banner. We count ad views and clicks without names, emails or IP addresses, and your browser keeps a small counter so we don’t show you too many sponsored screens.

Service providers

Hosting and storage: Cloudflare. Read-receipt emails, if you use them: Resend. Optional bot protection: Cloudflare Turnstile.

Contact

[Company name, address and contact email]