Privacy Policy

ZettelNote uses zero-knowledge encryption, which means there is very little the server can ever read in the first place. This page describes exactly what we collect, and what we don't.

What we collect

When you create an account, we store your username and a hash of your login password (computed with scrypt). Your plain password is never stored. We do not ask for an email address or any other personal information.

About your notes

Note content is encrypted on your device with AES-256-GCM before it's ever sent anywhere. The encryption key is derived from your own passphrase, locally, and never leaves your device. We only ever store encrypted data, so not even we can read the contents of your notes. The flip side is that if you forget your passphrase, we cannot recover it either — see our Terms of Service for details.

Access logs

To detect abuse and investigate incidents, we keep technical logs of requests to our servers (timestamps, IP addresses, error details) for a limited retention period. These logs contain nothing about the content of your notes.

Cookies and advertising

This site (zettelnote.top) shows ads through Google AdSense. Google and its partners may use cookies to serve ads based on your interests. You can opt out of personalized ads at any time via Google Ads Settings. The app itself (app.zettelnote.top) shows no ads once you're logged in.

Analytics

As of September 2026, we do not use Google Analytics or any other third-party analytics tool. We'll update this page if that changes.

Sharing with third parties

We do not share collected information with third parties, except where required by law.

Deleting your data

We don't yet offer a self-service account deletion feature in the app. If you'd like your account and stored data deleted, please contact us using the address below.

Contact

Questions about this policy can be sent to support@hol-tec.net. This policy may be updated from time to time as the service evolves.