Privacy
Run by Eppler Software, Canada. Last updated October 18, 2026.
Your notes live on your devices. When you turn on sync, the Sync Server passes encrypted copies between them. Here is everything the server stores, and whether it can read any of it.
On your device
Your notes, your Sync Key, and your settings. Every device keeps a complete copy of every note and works offline. The Sync Key is kept in the device's keychain and is never sent anywhere.
On the server
Nothing until you turn on sync. After that:
| Stored | Why | Readable by the server |
|---|---|---|
| Every edit, encrypted on your device | So your other devices can download it. | No The key is derived from your Sync Key and never leaves your devices. We cannot decrypt it either. |
| A vault id | Names your data. Derived one-way from your Sync Key. | No It cannot be turned back into the key. |
| An auth hash | Proves a device holds the key. Also derived one-way. | No Same. |
| Note ids, edit ids, sizes, and arrival order | Lets a device catch up after being offline. | Yes It shows how many notes you have and roughly how big they are, not what they say. |
| Your IP address | In memory for a few minutes, to limit how fast one address can create vaults and send data. Our host, Railway, also keeps request logs with the address and time of each request for a limited period. | Yes |
If you sign in
An Account is optional, and only exists on Nokto Cloud. Sync works without one. If you sign in:
| Stored | Why | Readable by the server |
|---|---|---|
| Your email address | Names your Account and is where sign-in emails go. Kept until you delete the Account. | Yes |
| Each sign-in request: your email address, your IP address, and one-way hashes of the link and code we sent | Checks the link or code you use, and limits how often anyone can request one. Deleted after a day. | Yes The email and IP address. The link and code themselves are not stored. |
| A one-way hash of your sign-in token | Keeps a device signed in. It expires 90 days after that device last used it. | No The token itself stays on your device. |
Sign-in emails are sent through Cloudflare's email service, which handles your address and the message to deliver it. Signing in never gives the server your Sync Key or your notes.
Not collected
No name, no password, no payment details, no analytics, no crash reports, no ads, no tracking. Paid plans are planned. When they arrive, this page changes first, and the date at the top changes with it.
Deleting
When a note leaves the Trash, the server deletes its encrypted edits and keeps only the note's id, so your other devices stop syncing it. Settings › Delete account removes your Account, its sign-in records, every signed-in device, and the server's copy of any vault attached to it. Your devices keep every note. To delete a vault that is not attached to an Account, email us and we will remove it by hand.
Updates and this site
The desktop app checks this server once a day for a new version. That check, and any download from this site, reaches the server with your IP address like any web request. Nothing else is sent.
Questions
Email support@noktonote.com.