Privacy Policy

The short version: we can't read your notes, we don't use cookies, and we don't have accounts. Here's exactly what we handle.

Your notes

• Notes are encrypted in your browser before they're sent to us. We store only the encrypted text, which we can't decrypt. The key exists only in the link you share.
• A note is permanently deleted from our database the moment it's revealed, when it expires unread, when the sender destroys it, or after 5 wrong password attempts.
• We keep a small "receipt" (timestamps only, no content) so the sender's status link can say whether the note was read. Receipts are deleted 7 days after the note's expiry. The status link's secret code is stored only in scrambled (hashed) form.
• A few facts about each note are stored unencrypted because the server needs them: when it was created, when it expires, and whether it has a password. Never its content, its key, or the optional label you give it (that stays in your status link).

Technical data

• Rate limiting: to prevent spam, we count requests using a version of your IP address scrambled with a secret key (a "keyed hash"), so the stored value can't be turned back into your IP without that key. We never store the IP itself, and these counters are deleted within about an hour.
• Hosting: the site runs on Cloudflare. Like any web host, Cloudflare processes standard request information (such as IP address and browser type) to deliver and protect the site. See Cloudflare's privacy policy. The secret part of a note link (after the "#") is never sent to Cloudflare or to us.
• No cookies, no trackers, no analytics are used today.

Abuse reports

If you submit a report, we store what you write (and the message text, only if you choose to include it) along with the note's ID. Reports are deleted after 180 days.

Advertising

To keep Self Destruct Note free, we plan to show ads served by Google AdSense on some pages (such as the home page and the "link created" page). Ads will never appear on the page where a message is revealed, and advertisers can never see your notes, because we can't either.

When ads are shown:

• Google and its partners may use cookies or similar technologies to show ads based on your visits to this and other websites.
• You can learn how Google uses this information at How Google uses information from sites that use its services, and opt out of personalized advertising at Google Ads Settings.
• Visitors in the European Economic Area, the UK and Switzerland will be asked for consent before any advertising cookies are used.

Until ads go live, the site uses no cookies at all.

Children

Self Destruct Note is not intended for children under 13.

Contact

Questions or requests: hinodestudio.dev@gmail.com