Privacy
Short version: your notes stay on your device. Notepans has no accounts, no analytics, no advertising and no third-party trackers.
What stays in your browser
Pans, tabs, notes, sticky notes, labels, reminders, alarms, timers, history and settings are saved by your browser on your device (IndexedDB and local storage). They are not sent to our server. Anyone with access to your browser profile can read them, and clearing your browser data deletes them — export a backup from Settings to keep a copy.
What reaches our server
- Published notes — only when you press Publish. The note is encrypted in your browser (AES-256-GCM) before it is sent. The decryption key is the part of the link after
#, which browsers never send to servers, so we cannot read it. It is deleted after one read or when its time is up (at most one year). - Ordinary web-server logs kept by our hosting provider (such as IP address, time and page requested) for security and abuse prevention.
Cookies
The notepad itself does not set tracking cookies. The admin area uses a session cookie for the site owner’s sign-in only.
Notifications
If you use reminders, your browser asks for permission to show notifications. They are created on your device; nothing is sent to a push service.
Contact
Questions about privacy: use the contact details published on notepans.com.
Last updated October 5, 2026.