Skip to content
Security

Security & Data Handling

How we keep your notes private and secure — local storage, password lock, no tracking and no account.

How your notes are stored

Every note you write in this secure online notepad is saved to your own browser using the localStorage API. Nothing is uploaded to a server by default. If you close the tab, the notes remain on your device and reload the next time you visit.

This makes the notepad effectively a private browser notes app — sensitive content stays where you typed it.

Password protection

Each note can be locked with a password. The password is hashed with SHA-256 in your browser before storage; the plain text is never written to disk and never sent over the network. To unlock, you re-enter the password and the hash is compared locally.

What we do not collect

  • We do not run user accounts.
  • We do not transmit the text of your notes.
  • We do not sell or rent any user data.
  • We do not run third-party trackers inside the editor.

Backups and exports

You control your data. Use the export feature to download a JSON backup at any time, or download an individual note as a .txt file. To migrate to a new device, import the JSON backup there.

Browser permissions

The editor only requests the permissions it needs:

  • Local storage — to save your notes between visits.
  • Microphone — only when you explicitly use voice input.
  • Clipboard — only when you click Copy or Paste.

Reporting a security issue

If you think you have found a vulnerability, please reach out via the contact page. We respond within two business days.

v2.0