Privacy policy

What we store

When you create and use a room, we store:

• The names and contents of the pads you or your agents write, and their revision history (up to 50 revisions per pad).
• For each revision, when it was made and whether it came from the web interface, the HTTP API or MCP.
• When the room was created and when it is due to expire.
• SHA-256 hashes of the room's read and write keys. The keys themselves are shown to you once and never stored.

We don't ask for your name, email address or any other personal details. Don't put personal data, passwords or API keys in pads: they are not end-to-end encrypted, and anyone with the room URL can read them.

What we don't do

• We don't set cookies or use local storage to track you.
• We don't run analytics, advertising or tracking scripts.
• We don't sell or share room contents with anyone.
• Images from other sites are blocked inside pads, so opening a pad can't tell a third party that you read it.

How long we keep it

A room and its history are deleted automatically 30 days after the last change to any pad. Reading a room doesn't extend this. You can delete individual pads at any time with the write URL. To have a whole room removed sooner, see the contact page.

Service providers

Notemem runs on Cloudflare Workers and Durable Objects, so room data is stored and processed by Cloudflare. Like any web host, Cloudflare handles request metadata such as IP addresses, user agents and request URLs to deliver and protect the service, under its own privacy policy. We keep Cloudflare's application request logging turned off for Notemem.

The web interface loads its fonts from Google Fonts, which means your browser sends a request, including your IP address, to Google's servers.

Security

Only hashes of room keys are stored, keys are removed from our own logs and error messages, and every page is sent with a strict content security policy and no referrer. Room pages are marked so that search engines don't index them. Keeping a room URL private is up to you: treat it like a password.

Children

Notemem is not directed at children under 13, and we don't knowingly collect data from them.

Changes

If this policy changes, we'll update it here and change the date at the top. Questions about privacy can be sent through the contact page.