Privacy Policy

Summary

• You do not need to create an account or give your name or email to use the service.
• What you write and attach is stored on Google (Firebase) servers, under the note’s address.
• Anyone who knows the address of a note can open and edit it.
• We do not sell your data. We show Google AdSense ads only on content pages, and only if you allow it. Your notes never show ads.
• If you allow it, we use Google Analytics to count visits to the site. The address of your notes is never sent to it: any note appears only as the generic page "/nota".

1. About the service

AnotPad is an online notepad: each address (for example, https://anotpad.com/my-note) opens a note, which can have text and attached files and can be organized in folders.

2. What data we process

• Content you create: the text of your notes, the names and paths of notes and folders, the attached files (up to 2 MB each) and the last 2 versions of the text, kept for the history.
• Lock email and password, only if you choose to protect a note with a password. They are used to allow unlocking and to remove the lock.
• Technical access data, such as IP address, browser type and date and time, automatically recorded by Google’s infrastructure (hosting and database) for operation and security.
• Preferences stored in your own browser, such as the theme, the language, the list of recent notes and the record that you accepted these policies. They are not sent to the server (see the Cookie Policy).

We do not collect data such as tax ID, phone number, location or contact lists, and we do not use audience analytics. Advertising is covered in the "Advertising" section below.

3. What we use the data for

• To provide the service: store, display and sync your notes across devices.
• To protect the service against abuse, scams and misuse.
• To handle your requests and comply with legal obligations or orders from authorities.

The legal bases are the performance of the service you use, the legitimate interest in the security and proper functioning of the service, and compliance with legal obligations.

4. Notes open to anyone with the address

Important: do not store passwords, card or bank details, personal documents, health information or any other sensitive data in AnotPad.

• There is no login. Anyone who knows or guesses the address of a note can see and edit its content. Choose names that are hard to guess.
• Password locking is a simple additional barrier, not strong protection: the lock email and password are stored in the database without additional encryption. Do not use a password you use on other services.
• The read-only link just opens the note without the editing buttons. Anyone who removes the parameter from the address can edit again.

Communication with the service uses a secure connection (HTTPS) and the infrastructure is Google Firebase.

5. Who we share it with

• Google LLC (Firebase Hosting and Realtime Database): infrastructure provider that stores and delivers the content on our behalf.
• Google Fonts: the page’s fonts and icons are loaded from Google’s servers, which receive your IP address and technical browser data in that request.
• The browser’s speech recognition service (only if you use voice dictation): to turn speech into text, the microphone audio is sent to your browser’s service (Google in Chrome, Microsoft in Edge, Apple in Safari), under its own policies. AnotPad does not receive or store the audio, only the text you choose to keep in the note.
• Google reCAPTCHA (Firebase App Check): checks, without asking anything of you, that access to the database comes from the site and not from an automated program. Google receives technical browser data (such as IP address) in this check, subject to Google’s Privacy Policy and Terms of Service.
• Google Analytics: if you accept usage statistics, Google receives data from your browser (such as IP address and cookie identifiers) to count visits. The address of your notes is not sent.
• Google AdSense: if you accept ads, Google and its partners receive data from your browser (such as IP address and cookie identifiers) to show and measure ads.
• Authorities, when there is a legal obligation or a court order.

We do not sell or rent data. The provider’s servers may be outside Brazil; in that case, processing follows what the LGPD provides for international transfers.

Advertising (Google AdSense)

To keep the service free, we show Google AdSense ads on content pages (home page, help, tips and guides). Ads never appear inside notes.

• Third parties, including Google, use cookies to serve ads based on your previous visits to this and other websites.
• The use of advertising cookies enables Google and its partners to serve ads to you based on your visit to this and/or other sites on the internet.
• The Google AdSense code is loaded on content pages. Ads are only shown if you accept in the notice shown when you arrive; if you decline, no ads are shown and we only ask Google for non-personalized ads. You can change your choice at any time in "Ad preferences", in the footer.
• For visitors from the European Union, the United Kingdom and Switzerland, the choice about ads and statistics is made in Google’s consent message (certified under the IAB TCF standard), and it also applies to Google Analytics. It can be reopened from the same footer link.
• You can also turn off ad personalization at adssettings.google.com and learn more about how Google uses data from partner sites at policies.google.com/technologies/partner-sites.

Usage statistics (Google Analytics)

If you allow it, we use Google Analytics to learn how many people visit the site and which public pages are most useful. Without your permission, Analytics is not loaded.

• The address of your notes is never sent: every note appears to Google as the generic page "/nota", without its name or the read-only parameter. The text, attachments and passwords of notes are not sent either.
• Google Analytics stores cookies (_ga and _ga_<ID>) and receives technical browser data, such as IP address, device type and language. We turn off the advertising and Google signals features.
• You can change your choice at any time in "Ad and statistics preferences", in the footer. If you decline, the Analytics cookies are deleted.

6. How long we keep it

• The content of a note is kept for as long as the note exists.
• You can delete a note at any time (⋮ menu › Delete note). This removes its text, history and files.
• We may remove content that violates the Content Policy.
• Technical logs and any backups follow the infrastructure provider’s retention periods.

7. Your rights

Under the LGPD, you may request: confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary data; portability; information about who we share data with; and withdrawal of consent, where applicable.

Because the service has no registration, to handle a request we need you to tell us the address of the note and, if it is protected, to show that you have access to it. In many cases you can solve it right away: edit or delete the note in the app itself.

8. Children and teenagers

The service is not aimed at children. Minors should use it under the supervision of a parent or guardian.

9. Changes to this policy

We may update this policy. The date of the last update is at the top of the page, and relevant changes will be highlighted on the home page.

10. Language

This English version is provided for convenience. If there is any difference, the Portuguese version prevails.

Contact

Questions, requests about your data and content reports: anotpad@gmail.com