Privacy Policy
We designed eNotePad so you can share notes and collaborate freely without giving away your personal identity or private data.
🛡️ Privacy at a Glance
No Forced Accounts
Create and share notes instantly using secret codes without giving phone numbers or email addresses.
Auto 20-Min Expiry
Anonymous shares are automatically purged after 20 minutes, leaving zero residual traces on servers.
Hashed PIN Security
Private 4-digit PINs are cryptographically hashed before transport. We never store plaintext passwords.
Zero Tracker Cookies
We do not sell data to brokers or employ third-party cross-site behavioral tracking scripts.
Information We Collect
eNotePad operates on data minimization. We only collect the minimal information necessary to sync your notes across devices:
sticky_note_2 Anonymous Shared Content
When sharing via a secret code, the note content (text, formatted link, or uploaded image/attachment) is temporarily indexed in our cloud storage so it can be retrieved on your other devices.
code CodeShare Sessions & Snippets
Code edited in CodeShare rooms is synchronized in real-time between room participants using session isolation. We do not claim ownership of, harvest, or train machine learning models on your proprietary source code.
lock Cryptographic PIN Hashes
If you choose to set a 4-digit PIN for private notes or accounts, we compute a cryptographic one-way hash. We never see or store your plaintext PIN.
person Optional Registered Account Data
If you voluntarily register an account for permanent library storage, we store your chosen username and encrypted library notes. Providing an email is completely optional.
How We Use Information
Data is strictly used to power real-time collaboration and platform security:
- check_circle Instant Cross-Device Sync: Delivering notes seamlessly to anyone with your exact 6-character secret code.
- check_circle CodeShare & Convo Rooms: Streaming keystrokes, syntax modes, live comments, and reactions exclusively between joined collaborators.
- check_circle Abuse Prevention & Reliability: Throttling automated bots and ensuring high-availability server performance.
Data Security & Encryption
We employ modern industry standards to protect your shared data:
TLS 1.3 Transport Encryption
Every request and live sync packet is encrypted in transit over HTTPS.
Granular Security Rules
Database access is protected by strict Firebase Firestore security rules.
Auto-Deletion & Data Retention
We ensure temporary content does not linger on our infrastructure:
Cloud Infrastructure & Third Parties
We rely on trusted cloud infrastructure to deliver lightning-fast real-time service:
• Google Cloud / Firebase: Secure database hosting, user authentication, and realtime syncing.
• Google Fonts & CDNs: Fast asset delivery for typography and icons.
Your Rights & Data Control
You retain absolute sovereignty over your content:
- delete Instant Manual Deletion: You can delete any active secret code note immediately from the app.
- person_remove Account Purging: Registered users can permanently delete their entire account and library in 1 click under Account Settings.
Contact & Privacy Inquiries
Have questions or need assistance with your data rights? Reach out directly to our support desk: