Privacy Policy

Last updated: July 19, 2026

1

Introduction

Welcome to LockNotes ("we", "our", or "us"). Your privacy is our highest priority. We built LockNotes specifically to allow you to share information securely, without leaving a trace. This Privacy Policy explains our zero-knowledge architecture and what little data we interact with.

2

Zero-Knowledge Architecture

LockNotes uses end-to-end encryption. The message you type is encrypted directly in your browser before it ever reaches our servers. The decryption key is generated locally and embedded into the URL fragment (after the #). Because browsers do not send URL fragments to servers, we never receive or possess the decryption keys to your notes.

Consequently, we cannot read your notes, nor can we share them with third parties, advertisers, or law enforcement. We simply do not have the technical means to decrypt the data.

3

Data We Collect

We practice extreme data minimization:

  • No Accounts: We do not require or collect names, emails, or phone numbers.
  • Encrypted Payload: We store the AES-GCM 256-bit encrypted ciphertext of your note.
  • Expiration Metadata: We store the time the note was created and its destruction status.
  • Security Logs: We temporarily log IP addresses exclusively for rate-limiting and abuse prevention. If a message is reported for violating our Terms of Service, the sender's IP address will be permanently retained in a ban list to protect our platform.
4

Data Deletion

A note is permanently and irrevocably deleted from our database the moment it is accessed via its unique link. If a note is never opened, it is automatically purged from our servers 30 days after creation. There are no backups of destroyed notes.

5

Cookies and Tracking

We do not use cookies for tracking or advertising. We only use local storage for essential application state (e.g., your preference for dark mode).

6

Changes to This Policy

We may update this Privacy Policy from time to time. Since we have no way of contacting our users (because we collect no emails), we encourage you to review this page periodically.

7

Contact Us

If you have questions about this Privacy Policy, please contact us at hello@webrizen.com.