1. Introduction

Online Notepad is a free, account-free tool for creating and sharing temporary notes with a link or QR code. This Privacy Policy explains how we collect, use, and protect your information when you use our service. By using Online Notepad, you agree to the collection and use of information in accordance with this policy.

Notes are designed to be shared and are temporary. Anyone you give a note's link and PIN to can open, read, and edit that note. Notes and their attachments are automatically deleted 7 days after the last time they were opened or edited.

2. Information We Collect

Note Content

We store the content of notes you create using our service. This content is associated with a unique note ID that you choose or we generate for you.

Images & File Attachments

When you paste an image or attach a file (such as a PDF or document) to a note, we store that file so it can be shown inside the note. Uploaded files are kept on our servers and are only served to people with a valid PIN session for that note. They are deleted together with the note.

PIN Information

Your PIN is hashed using industry-standard bcrypt encryption before being stored. We never store your actual PIN - only the encrypted hash.

Technical Data

We may collect basic technical information such as browser type, device type, and access times to improve our service and troubleshoot issues.

3. How We Use Your Information

We use the information we collect to:

Provide and maintain the Online Notepad service
Authenticate your access to notes using your PIN
Improve and optimize the service
Detect and prevent technical issues or abuse

4. Data Security

We implement security measures to protect your data:

PINs are encrypted using bcrypt before storage
All data transmission is encrypted using HTTPS
Database access is restricted and monitored
Regular security reviews and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

5. Data Retention

Notes are temporary. A note and its attachments are automatically deleted 7 days after the last time the note was opened or edited. Every time a note is viewed or edited, this 7-day timer resets. Once deleted, notes and their files cannot be recovered. If you want to keep a note, you can export it to a Word document before it expires.

6. Cookies & Local Storage

When you unlock a note with its PIN, we set a secure, HTTP-only session cookie so you don't have to re-enter the PIN on every visit. This cookie is scoped to that note and expires automatically after about 4 hours. You can lock your notes early from the home page, or by clearing your browser's cookies.

We also use your browser's local storage to keep a "recent notes" list (note IDs, titles, and when you last opened them) so you can quickly return to notes on this device. This list stays on your device, is never sent to us, and can be cleared at any time from the home page or by clearing your browser's local storage.

7. Where Your Data Is Stored

Note text and PIN hashes are stored in a MongoDB database. Uploaded images and file attachments are stored on our own servers and served only through an authenticated route to people with a valid PIN session for the note. All data transmission is encrypted using HTTPS.

8. Children's Privacy

Online Notepad is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Your Rights

You have the right to:

Access your notes using your ID and PIN
Delete your notes by clearing their content
Request information about the data we store about your notes

Note: Due to our privacy-focused design, we cannot recover forgotten PINs or identify note ownership without the correct PIN.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our practices, please contact us at iiniit.com.