Policies

Privacy Policy

Last updated October 2026

NoteDraft is built so that there is very little to say here. You never need an account, and without one your documents never leave your browser. If you choose to create an account so your notes sync between devices, this page says exactly what is stored and where.

Your documents

Everything you write, calculate, present or draw is stored in your own browser using IndexedDB, on the device you are using. Unless you sign in to an account, it is never transmitted to us and we have no way to read it.

Clearing your browser data deletes your documents. Use File → Save a copy as in any tool to write a real file to your own disk if you want a durable backup.

Share links

When you create a share link, the whole document is compressed into the part of the URL after the #. That fragment is never sent to any server — it is handled entirely inside the browser. The consequence worth understanding is the opposite of a privacy risk from us and a real one from you: anyone you give the link to can read the document, and anywhere you paste it (a chat, an email, a ticket) now contains the document itself.

Accounts and sync (optional)

You can create a NoteDraft account with an email address and password, or sign in with Google. While you are signed in, your notes and drawings are copied to NoteDraft's server so the same notes appear on every device where you sign in. Notes already in the browser when you sign in are added to the account too.

For an account we store:

• your email address, and when you confirmed it;
• your password, only as a salted one-way hash (we cannot read it), or, if you use Google, the account identifier Google gives us — never your Google password;
• the notes and drawings you sync, with when they were last changed;
• a session record for each signed-in browser, which ends after 60 days or when you sign out.

This runs on Cloudflare, which hosts the site, stores the data and sends our emails. The emails are only the ones you would expect: confirming your address, resetting your password, a welcome, and a notice when your password changes. We do not send newsletters and do not give your address to anyone. We do not read your synced notes, and only would if the law required it.

Sign out at any time; you can choose to keep or remove the notes in that browser. Deleting your account (in Account and sync) removes your email address, password and every synced note from our server straight away.

Sharing notes with people, and public notes

A note in your account can be shared with other people by their email address, so they can read it or edit it with you. We send each person one email saying who shared what with them, and store their address with the note so the right people can open it. While several people have a note open, each of them sees the others' names (the part of their email address before the @) and where they are typing.

You can also make a note public: anyone with its link can then read it, without an account. We ask search engines not to list public notes, but anyone you give the link to can pass it on. Make it private again and the link stops working for everyone but the people you added. Deleting a note ends its link and everyone's access to it.

Files you open

Text, Markdown and image files you open or paste are read inside your browser. They are not uploaded.

Analytics

We use Google Analytics to understand how many people use each tool. It runs in Google's consent-denied mode, which means it counts page visits without setting cookies or storing any identifier about you — so there is no cookie banner, because there is nothing to consent to. It never sees the contents of your notes.

Google may set cookies and process this data under its own privacy policy.

Advertising

If advertising is shown on this site, it may be served by Google AdSense, which can use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising through Google's Ads Settings. Advertising is never shown on a page displaying someone's shared note.

Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before any advertising cookies are used, through a consent message provided by Google. You can change your choice at any time from the privacy link that message leaves on the page.

Ads are shown beside and below your notes, never inside them. Advertisers and Google never see the contents of your notes or drawings.

What we do not do

• We do not make you create an account. It is only for syncing between devices.
• We do not collect your name or other personal details. An account needs an email address and nothing else.
• We do not upload your documents unless you sign in, and we do not read, scan or analyse them.
• We do not sell data or use your notes for advertising.

Children

NoteDraft is a general-purpose set of tools and is not directed at children under 13. We do not knowingly collect personal information from anyone.

Changes

If this policy changes, the date at the top of this page changes with it.

Contact

Questions about this policy can be sent through the about page.