Privacy policy

What data does HideNote collect?

None that identifies you. The app has no accounts, does not ask for a name, email or phone number, has no ads or usage analytics and does not send your messages to any server.

What is stored on the phone?

Only what the reading conditions need: the fingerprint (SHA-256) of the identifier of each read-once message already opened, the highest time seen so that turning the clock back does not reopen expired messages, the number of wrong passwords per message and your language and appearance settings. Never the text of messages or passwords.

What happens to messages?

The message travels encrypted inside the code you send through the app of your choice. That app (WhatsApp, Telegram, email) handles the code under its own privacy policy. Without a password, the key is inside the code; with one, it is not.

What about the camera?

The camera is only used to scan a QR code when you ask. The image is not saved and never leaves the phone. On Android, Google's code scanner (ML Kit) may send Google usage data about the scanner itself, never the image or the content.

What does this website's server see?

The website is served by Cloudflare Pages. Like any web server, it receives the IP address and the page requested. Messages you create with the tool are encrypted in your browser and are not sent. The code in links goes after #, a part the browser never sends to the server. The website uses no cookies, analytics or third-party scripts.

The page code is delivered by the server: if someone tampered with it, they could change what the page does. The installed app does not have this risk.

How do I get in touch?

For any privacy question, write through the app's support page on the store.