SafeNoter does not collect, transmit, or sell any personal information about you. This page explains exactly what that means.
SafeNoter has no sign-up and no user accounts of its own. There is no analytics, no advertising, and no tracking script running on this site. The only external services SafeNoter ever talks to are ones you explicitly choose to use, and only at the moment you choose to use them — described below.
Everything you type stays in your browser's memory while you work. When you save — locally, to Google Drive, or to a SafeNoter web address — your content is encrypted with your own password before it is written anywhere. That password is never sent over the network and never stored by SafeNoter in any form, on any server.
If you click “Save to Google Drive” or “Open from
Google Drive”, your browser talks directly to Google's own
servers, under your own Google account's permissions —
SafeNoter's server is never involved in that exchange and never sees
your Google credentials, your access token, or the contents of your
Drive. SafeNoter requests the narrowest possible permission
(drive.file): it can only ever see files it created
itself, never the rest of your Drive.
If you save your notes or tasks to a SafeNoter web address (a subdomain of this site), the encrypted file is stored on this site's server. The server only ever receives the already-encrypted content and a one-way mathematical “proof” derived from your password (not the password itself) — it cannot decrypt your content and never learns your password. See the Terms of Service for how long that storage is expected to last.
SafeNoter uses your browser's local storage only for your own convenience: your chosen interface language, your tree/panel layout preferences, and (if you use Google Drive) a temporary cached access token. None of this is ever transmitted to us — it stays on your device and is readable only by you, in your own browser.
One more item is stored there, but only if you explicitly opt in: when opening an already-encrypted file, checking “Remember this password on this device” saves your encryption password itself — as plain text, with no additional encryption of its own — in your browser's local storage, tied to that specific address (a subdomain's saved password is not visible to any other subdomain, or to the main site). This never happens unless you check that box, and only after your password has already been verified to work. Anyone with access to this browser profile on this device could read it; only use this option on a device you trust. You can remove it at any time from the “Password” → “Forget Saved Password” menu in the app.
Like virtually any website, the web server hosting this page may keep basic technical access logs (IP address, request time, requested URL, browser user agent) for security and operational purposes. These logs are unrelated to — and cannot be used to read — the encrypted content of your notes and tasks. They are not used for tracking, and are not shared with third parties.
If you have any question about this policy, contact yura.gerich@gmail.com.