Last updated: January 2025
Standard Notes is based in the United States and operates its infrastructure within the US while aligning with GDPR requirements. All data processing is conducted under applicable US law with GDPR-aligned protections for all users worldwide.
Standard Notes collects the minimum amount of data necessary to provide the service. Below is a comprehensive overview of what we collect:
We use privacy-respecting analytics that do not track individual users. No personal data such as IP addresses, cookies, or device identifiers are collected from website visits.
To create an account, you provide an email address. Your email is used for authentication, account recovery, and essential service communications. All note data is encrypted end-to-end before reaching our servers — we cannot read your notes.
We may send a verification email to confirm your identity during account creation or password recovery.
We store metadata necessary for syncing, including timestamps of sync operations. The content of your notes and files is always encrypted and unreadable by us.
Basic device and browser information may be collected for compatibility and debugging purposes.
IP addresses may be temporarily processed for rate limiting, abuse prevention, and security purposes. They are not stored long-term or used for tracking.
If you contact us via email or support channels, we retain those communications to provide support and improve our service.
Payment processing is handled by third-party processors (Stripe, PayPal, Coinbase). We do not store your full credit card details. We retain only a transaction reference and subscription status.
All notes, tags, files, and other application data are encrypted end-to-end using keys derived from your password. We have zero knowledge of your content.
We use the following service providers to deliver our service:
We will only disclose user data when required by law, such as a valid subpoena, court order, or government request. Due to our end-to-end encryption architecture, the data we can provide is extremely limited (typically just email address and account metadata). We cannot provide the content of your notes or files, as we do not have the encryption keys.
You have the right to:
We reserve the right to modify this privacy policy at any time. Changes will be communicated through the application or via email. Continued use of the service after modifications constitutes acceptance of the updated policy.
For privacy-related inquiries, please contact us at [email protected].