Privacy
We'd rather not know.
Kanso keeps your notes on your computer. If you sync, they are encrypted on your device first, so the server holds only what it needs to pass them between your devices.
This website
No analytics, no cookies, no trackers, no forms. The server reads your browser's User-Agent to suggest the right download and then forgets it.
The sync server
It can't see
- Note titles or text
- Notebook and tag names
- Which notes are in which notebook or carry which tag
- Links between notes
- File names or contents
- Your password, your recovery key or the key your notes are encrypted with
It can see
- Your account
- Your username, when the account was made, and whether it's active.
- Sizes and times
- How many notes, notebooks, tags and files you have, roughly how big each is, and when each was written.
- Your devices
- How many devices are signed in and when each was last seen, to the hour. Not their names: those are encrypted.
- The network
- Your IP address, as any server does while handling a request. It is kept only as a keyed hash in rate-limit records, for at most two days.
Published notes
A published note is encrypted too, and its key lives only in the link you share. To give the link a short address and a preview, Kanso sends the note's title, and never its key or text, to the link service.
Every detail, including how the encryption works, is in the accounts design document. You can also run the sync server on your own Cloudflare account.