Privacy Policy

Effective date: May 18, 2025 · Updated: October 11, 2026

1. Introduction

At KeepNotes.online, your privacy is important. This Privacy Policy explains how we handle your data and your rights as a user. The privacy policy of the KeepNotes Chrome extension is a separate page.

2. Information we collect

• Email, display name and password (stored as a hash) when you register an account
• Session data via cookies to keep you logged in
• Note content, attachments and version history saved in your account or anonymously
• Email addresses you share notes with, and who last edited a shared note
• IP address and user agent for fraud prevention, rate limiting and analytics

3. How we use your data

Your data is used solely to provide and improve the note-taking service. We do not sell your data. It may be used for:

• User authentication and session management
• Saving, syncing and sharing your notes as you direct
• Sending the emails you ask for: confirmation, password reset, share invitations and the optional daily digest of changes to shared notes
• Detecting misuse and securing the platform
• Anonymous statistics via services like Google Analytics

4. Third-party services

We use these third-party services:

• Google Analytics — to understand how the website is used (pages visited, device and browser type, approximate region). It never receives the text of your notes.
• Google AdSense — to show ads on our articles (the blog), which helps keep KeepNotes free. Ads are not shown in the note editor, in notes, on account pages, in the Android/iOS app or in the browser extension. See section 5 for advertising cookies.
• Google Sign-In — if you choose to log in with Google (we receive your email address and name).
• Cloudflare — to deliver and protect the site.
• OpenAI — only when you use the AI assistant on a note; the note text you submit is sent to OpenAI to produce the result.

The KeepNotes Android and iOS apps load no advertising and no analytics. The Chrome extension has its own extension privacy policy.

5. Cookies and advertising

Cookies we set ourselves. A session cookie keeps you logged in and remembers notes you unlocked with their password. Your choices such as theme, pinned notes and recently opened notes are stored in your browser (local storage) and are not sent to anyone.

Analytics. Google Analytics uses cookies to count visits and measure how the site is used.

Advertising. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. Third-party vendors and ad networks may also serve ads on our site.

• You may opt out of personalized advertising by visiting Google Ads Settings.
• You can opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info (or youronlinechoices.eu in Europe).
• How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
• You can also block or delete cookies in your browser settings; the editor keeps working, but logging in needs the session cookie.

6. Data retention

We retain your notes and account information while your account remains active. Notes you delete from an account stay in a trash for 30 days and are then removed; notes set to self-destruct are removed when their limit is reached. You can delete your account, with all its notes, attachments and shares, from the account page at any time, or request deletion by contacting us.

7. Your rights

You have the right to access, update, export or delete your data. The account page offers a full export of your notes as Markdown. To exercise any other right, please email [email protected].

8. Changes to this policy

This Privacy Policy may be updated in the future. All changes will be posted on this page with the revised date.

9. Consent in the EEA, the UK and Switzerland

Visitors from the European Economic Area, the United Kingdom and Switzerland are asked for consent before advertising and analytics cookies are used. The consent message is provided by Google's certified Consent Management Platform (integrated with the IAB Transparency and Consent Framework) and appears on pages that show ads. Until you choose, Google's tags run in a restricted mode (Google Consent Mode) that does not store advertising or analytics cookies, and ads that are shown are not personalized.

You can change or withdraw your choice at any time with the Privacy and cookie settings link at the bottom of our articles.