Privacy Policy
At CryptoNote, privacy is taken very seriously, since the main purpose of the site is to preserve it. This policy outlines the measures taken by CryptoNote to protect the privacy of its users.
1. Service description
CryptoNote is a free web based service that allows users to create encrypted notes that they can share over the internet as unique one-time-use HTTPS URLs (hereafter referred to as links) which by default expire after its first access via any web browser.
As CryptoNote does not provide any means for transmitting the link, the act of sending the link is the full responsibility of CryptoNote users.
Depending on the communication channel of your choice (e.g., e-mail, fax, SMS, phone, instant messaging, social media), there may be a certain risk that third parties intercept your communication, get knowledge of the communicated link and thus may be able to read your note.
2. How the notes and its contents are processed
New notes are encrypted on the server with a separate random secret included in their link. The database stores ciphertext and public metadata, not the secret or complete link. Keep the complete link: it cannot be recovered from the database.
The server receives plaintext when a note is created, and the secret when its link is opened. Encryption and decryption happen on the server during those requests. This protects stored notes against disclosure of the database and application key; it does not protect against an actively compromised server. Anyone with the complete link can read a note unless it also requires a password.
When using CryptoNote's default funtionality, when a note is retrieved, its data is completely removed from CryptoNote; it is no longer available through the service.
When "Show options" is selected and the user opts for a time interval for the note's removal, then independently of how many times the note is retrieved, the note will be deleted only after that specified time is completed.
After a note is deleted from CryptoNote, it is no longer available through the service.
Notes are deleted after their configured number of readings or expiry time. Legacy notes created before the per-note-secret format still use the application key and do not have the same protection. Deleting a live record does not guarantee removal from existing database backups.
3. Processing of IP addresses
Server access logs may contain IP addresses, request methods and status codes. Application-managed logs exclude complete note URLs, note contents and secrets. External proxies and monitoring services must be configured with the same restrictions.
4. Pseudonymous data
The creator of the note can introduce personal data into the note. Even though this data is encrypted, the data can be decrypted again and thus constitutes pseudonymous (personal) data. In any case, one cannot deduce the note's creator from CryptoNote's database, as CryptoNote does not store IP addresses.
The complete link supplies the secret needed to decrypt a new note. The server processes this secret in memory during a request without deliberately persisting it. Optional passwords add a second encryption layer. Losing the secret, or a required password, prevents recovery of the plaintext.
5. Disclaimer
When a person clicks the CryptoNote's link, CryptoNote declines any responsibility related to the note's content.
6. Disclosure of Data to Third Party
CryptoNote does not share nor sell any information to others, nor use it in any way not mentioned in this Privacy Policy.
7. Use of cookies
CryptoNote uses cookies (small text files that are stored on your computer by your browser when you visit a website) for our own interest in improving the use of our site and service. In some cases they will also be used for promotional purposes. The type of cookies CryptoNote uses are listed below:
Functional cookies CryptoNote uses persistent cookies to keep a session in the user's preferred language and to record your notification that CryptoNote uses cookies as explained in this section. Session cookies support CSRF protection for forms; note secrets and contents are not stored in the session.
Non-functional cookies Used for commercial and promotional purposes. Non-functional cookies are placed by third parties. In case of European citizens, these cookies do not store personal data (non-personalized ads).
If you would want to remove certain cookies, or block them from being stored in your browser, it is possible via your browser settings for cookies. However, if you do this, the site might not work as expected.
8. Children
CryptoNote does not target and is not intended to attract children under the age of 16. Minors must obtain express consent from their parents or legal guardians prior to accessing or using CryptoNote.
9. Validity of this Privacy Policy
Please note that this Privacy Policy may change from time to time. We expect most changes to be minor. Regardless, we will post any Policy changes on this page, and if the changes are significant, we will provide a more prominent notice such as a message on the home page. Each version of this Policy will be identified at the top of the page by its effective date.
10. Contact information
If you have any questions about this Privacy Policy or other concerns regarding privacy issues, please e-mail us at, and we will answer you in less than 5 working days. If you are not satisfied with the outcome of our communication, you may refer your complaint to a local supervisor authority.
