Documentation & Legal
Everything you need to know about LockNotes. Our architecture, features, pricing, and the legal framework that guarantees your absolute privacy.
Features & Architecture
Zero-Knowledge Architecture
LockNotes operates on a strict zero-knowledge principle. We do not have the decryption keys to your notes. The encryption and decryption happen entirely in your browser using the Web Crypto API. We only store encrypted blobs.
Instant Self-Destruct
Once a note is opened, it is immediately and permanently wiped from our database using an atomic PostgreSQL RPC transaction. There are no backups, no soft-deletes, and no way to recover it.
Abuse Prevention
While we minimize data collection, we strictly enforce platform safety. IP addresses are temporarily logged to prevent spam, and any recipient can report abusive content. Reported IP addresses are permanently banned from our service.
Client-Side AI Moderation
To prevent abuse, we use an ultra-lightweight WebGPU toxicity model to block malicious content *before* it leaves your device. We protect our infrastructure without compromising your privacy.
Simple, Transparent Pricing
100% Free Forever
Privacy is a fundamental human right, not a premium feature. LockNotes is completely free to use for everyone, with no hidden fees, no premium tiers, and no ads.
Frequently Asked Questions
Can you recover a note if I lose the link?
No. Since we do not know the decryption key (which is part of the URL), and we cannot see the contents of the database, it is mathematically impossible for us to recover lost notes.
What happens if someone intercepts the database?
They would only see a table of random, encrypted ciphertexts. Without the unique URLs (which contain the decryption keys), the database is completely useless.
How long do unread notes stay on the server?
Unread notes are automatically purged from our servers 30 days after creation by an automated cron job to minimize data footprint.
Is LockNotes open source?
Yes, the core cryptographic implementation of LockNotes is available for public audit. We believe transparency is the only way to prove privacy.
Legal & Privacy Policy
1. Data Minimization
LockNotes by Webrizen collects the absolute minimum amount of data required to deliver a message from point A to point B. We do not require accounts, email addresses, or phone numbers.
2. End-to-End Encryption Guarantee
All message contents are encrypted locally on the sender's device using AES-GCM 256-bit encryption. The decryption key is appended to the URL as a hash fragment (#key), ensuring it is never transmitted to our servers during the HTTP request.
3. Law Enforcement Guidelines
Because of our strict Zero-Knowledge Architecture, LockNotes cannot comply with requests to decrypt user messages, as we do not possess the cryptographic keys. We can only provide encrypted ciphertext, which is useless without the specific URL possessed by the sender or recipient.
4. Acceptable Use
While we respect privacy, LockNotes must not be used to transmit illegal content, coordinate violence, or distribute malware. Our client-side models act as a first line of defense against toxic or harmful content.