Documents
Privacy
How enquiries, technical logs, analytics and encrypted one-time notes are processed.
Email enquiries
When emailing Show email, the sender chooses to provide an email address and message content. We use that information to respond and assess the enquiry.
One-time notes
Note content is encrypted in the browser using AES-256-GCM. The server receives only the encrypted envelope and retention period. The decryption key remains in the URL fragment, is not sent to the server and is not written to application logs. The encrypted record is atomically removed after its first retrieval or when its selected lifetime ends.
If the creator requests a destruction notification, the notification email and sender-defined note title are stored with the encrypted record until retrieval or expiry. The title is used only in the email sent to the creator and is not shown to the recipient. These details are never placed inside technical event statistics.
Technical data and retention
For security, abuse prevention and service analysis, IP address, pseudonymous IP hash, timestamp, event type, technical session, Cloudflare country and network data, User-Agent, browser and platform hints, language, referrer and consent state may be stored for 30 days. Note plaintext, passwords and decryption keys are excluded.
Cookies and analytics
A session cookie supports service operation and abuse prevention. Only after consent, a first-party visitor identifier is retained for up to 180 days to distinguish returning and temporary visitors. Refusal does not prevent note creation or reading. The public site also uses separate cookieless analytics without advertising profiling.
Confidential material
Do not send passwords, one-time codes or access keys through ordinary email. Use the encrypted one-time-note service for sensitive material and send any additional password through a separate channel.