Privacy Policy

Last Updated: 3rd May 2026

1. Who we are

RNote.org is operated by Rod, based in the United Kingdom.

If you have any questions about this Policy or how your data is handled, please contact us at:

2. Information We Collect

We collect limited information to provide and improve the Service:

a. Information you provide - Notes and text you create, edit, or store within RNote.org. (Your notes are stored securely and are not shared or used for advertising purposes.)

b. Automatically collected data - When you visit RNote.org, we may automatically collect certain technical information, including:

  • Your IP address (which may be anonymised)
  • Browser type and version
  • Device information
  • Pages visited, time spent, and navigation patterns

This data helps us understand how people use the site and improve its performance.

c. Cookies and analytics - RNote.org uses Google Analytics to collect anonymous usage statistics. Google Analytics uses cookies to gather information such as how often users visit the site, what pages they view, and what other sites they visited prior to coming here. This information helps us measure and improve the Service.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service
  • Improve and optimise site performance
  • Monitor usage and detect potential issues
  • Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Security and Encryption

We take data security extremely seriously and use multiple layers of protection to safeguard your information.

  • Encryption at Rest: All stored data (including your notes) is encrypted at rest using OpenSSL with AES‑256 and AES‑128 encryption algorithms.
  • Integrity Protection: All notepad content is signed using a Message Authentication Code (MAC) to ensure that encrypted data cannot be modified or tampered with without detection.
  • Transport Security: All communication between your browser and our servers is encrypted using HTTPS (TLS).

While we take reasonable and industry‑standard measures to secure your data, no system is completely immune to risk. You use the Service at your own discretion.

5. Data Retention

Your notes and related data are stored for as long as your account remains active, or until you choose to delete them.

Analytics data is retained according to Google Analytics’ default retention settings (currently up to 26 months).

6. International Data Transfers

Because we use third‑party services such as Google Analytics, your data may be processed outside the UK or the European Economic Area (EEA).

Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data remains protected under UK data protection law.

7. Your Rights (Under UK GDPR)

You have the following rights regarding your personal data:

  • Access – Request a copy of the data we hold about you.
  • Correction – Ask us to correct any inaccurate or incomplete information.
  • Deletion – Request that we delete your data (subject to legal or operational requirements).
  • Restriction – Ask us to limit how we process your information.
  • Objection – Object to processing based on legitimate interests.
  • Data portability – Request a copy of your data in a structured, machine‑readable format.

To exercise any of these rights, please contact us at: contact@rnote.org

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/

8. Changes to This Policy

We may update this Privacy Policy occasionally.

The “Last Updated” date above indicates when it was last revised.

Continued use of the Service after changes are posted means you accept the updated Policy.

9. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: contact@rnote.org