Privacy
Short version: drafts stay on your device; publishing makes a public copy online. Here is exactly what is stored, where, and what leaves the browser.
Where your notes live
Editing, previews, word counts, and case conversion run in your browser. Notes, Markdown drafts, the text in the word counter and the case converter, and your theme and editor preferences are written to localStorage under the onlinenote.app origin. That storage is on your disk, managed by your browser, and readable only by pages from this domain. There is no account system or automatic cloud synchronisation. Draft text is not uploaded while you type. Publishing is an explicit, separate action.
Because it is browser storage, it follows the browser's rules: it is separate per browser and per profile, it is discarded when a private window closes, and it goes away if you clear site data. The notepad shows a local-draft reminder and offers a one-click download.
Published notes and share links
Opening Share does not upload your note. When you choose Publish note or Publish changes, we send the selected note text, your chosen public name and note name, and its format to Cloudflare Workers and store a public copy in Cloudflare D1. Anyone can read it at its link, including on another device. Memorable links can be guessed. Do not publish secrets or private information.
A random management key stays with the local note in your browser. Only its SHA-256 hash is stored in the database. The key is sent securely when updating or unpublishing; it is never part of the public link. Keep the original browser data to retain this access. Names are not verified identities, and an available link does not establish ownership of a person's name.
Unpublish makes the link unavailable to readers and reserves it for you to publish again. The stored copy remains in the database; unpublishing does not erase copies others have made. Published and unpublished records are retained until removed by the site operator. For a removal request, contact the support address below with the link, without sending your management key.
Shared-note pages have no Google Analytics and do not enter our sitemap. We ask search engines not to index or archive them, but this is not access control. Requests include network information such as IP addresses; a short-lived Cloudflare rate limiter uses the IP address to limit publishing abuse. Our note database does not store IP addresses.
Older share links containing #n= still encode the note in the URL fragment. Browsers exclude that fragment from HTTP requests. Anyone or any service receiving the full legacy link receives a copy of the encoded note.
Optional Google Analytics
Google Analytics loads only after you choose "Allow analytics". Declining leaves every tool available. We measure visits and a small set of actions: starting a note download, copying Markdown HTML, copying a word-count summary and converting case. Analytics receives the public tool-page address and fixed page title, a referring site's origin, and technical information such as device/browser details and approximate location. Google processes your IP address when receiving requests.
We do not send note text, note titles, pasted text, exported filenames, share-link fragments or URL query strings to Analytics. Automatic form, search, link-click and file-download tracking is disabled. Google signals and advertising personalisation are disabled; no advertising consent is granted.
If allowed, first-party _ga cookies distinguish visits. They are configured to expire 30 days after the latest visit. Your analytics choice is saved in this browser's localStorage until you change it or clear site data. Use "Analytics preferences" in the footer to allow or decline at any time. Declining stops future analytics events and removes this site's Analytics cookies; it does not erase reports already received by Google. Other browsers and profiles have their own choices.
Google's processing is described in its privacy policy and information about sites that use Google services.
Fonts
Manrope and EB Garamond are served from this site. Loading our fonts does not send a request to Google Fonts.
Offline copy
A service worker caches the site's own HTML, CSS and JavaScript so the pages open offline. It caches only the tool pages and their assets, not the publishing API or public note pages.
Hosting
Cloudflare hosts and delivers the site. Requests for pages and files include technical information such as your IP address and browser headers. Draft text is not included in ordinary page requests. Publishing requests send the selected note to Cloudflare, and shared-note responses contain its public text.
About and contact
OnlineNote.app is a collection of free browser-based writing tools, made by the team behind ClearDisk. For support, bug reports or privacy questions, email anilgautamwork@gmail.com. Do not include private note content unless it is needed for your request.
Last updated 27 September 2026.