Privacy policy

The short version

• Without an account, your notes never leave your browser.
• With an account, we store your email address and your notes so they can sync between your devices.
• We don’t read your notes, show ads, run analytics or sell anything about you.
• You can export everything, and deleting your account deletes your notes.

Without an account

Notes, tags and settings are saved in your browser’s own storage on your device. They aren’t sent to us or anyone else. Clearing your browser’s data for TinyNotes removes them, so export a backup if you want a copy (Settings → Backup & import).

With an account

When you sign in, we keep:

• Your email address, to identify your account and send account emails (confirming your address, resetting your password). Your password is stored only as a secure hash.
• Your notes: their titles and text, tags, status, pinned and deleted state, and the notebooks you keep them in (their names, icons and order), and the times they were created and changed, so they stay in sync across your devices.

Your notes are protected by access controls so only your account can read them. They are not end-to-end encrypted. We don’t look at them, except when you ask us to help with a problem or when the law requires it.

Emails

We email you only what your account needs: confirming your address, password resets, and important changes to the service. No newsletters or marketing.

Cookies and local storage

When you sign in, your browser keeps a session cookie so you stay signed in. TinyNotes also uses your browser’s storage for your notes and preferences, and to work offline. There are no advertising or analytics cookies.

Who helps us run TinyNotes

A few service providers handle data on our behalf, only to run TinyNotes:

• Supabase stores accounts and notes, and handles sign-in.
• Vercel hosts the app. Like any web host it sees requests, including IP addresses, and keeps short-lived logs to keep the service secure and working.
• An email delivery provider sends account emails.

Keeping and deleting

Your notes are kept until you delete them. Recently Deleted holds notes until you restore them or delete them permanently. Deleting your account (Settings → Account) removes your email address and all of your notes from our database straight away; copies in our providers’ routine backups are overwritten as those backups expire.

Your choices

• Export all your notes as a backup or as Markdown at any time.
• Delete any note, or your whole account.
• Ask us what we hold about you, or to correct or delete it: email support@tinydotlabs.com.

Children

TinyNotes isn’t meant for children under 13, and we don’t knowingly keep accounts for them.

Changes

If this policy changes, we’ll update this page and the date at the top. For significant changes we’ll let account holders know by email.

Contact

Questions about privacy? Email support@tinydotlabs.com. See also the Terms.