Last Updated: August 21, 2026
The short version: Your notes are yours. They are stored locally on your device. When you use sync, your data is end-to-end encrypted before it leaves your device — we cannot read it. We don't track you, profile you, or sell your data.
Klarinotte is a privacy-first note-taking application. This policy explains what data we collect, how we handle it, and what choices you have. We designed the app so that we know as little about you as possible.
By default, all your data lives exclusively on your device:
We have no access to your locally stored data. If you clear your browser data or your device fails, local data may be lost — we strongly recommend using the sync feature or maintaining your own backups via export.
If you create an account and enable sync, your data is transmitted to our servers. Here's exactly what happens:
All note content, attachments, folder structures, bookmarks, and settings are encrypted on your device before upload using AES-256-GCM. The encryption key is derived from your password and never leaves your device. This means:
When sync is enabled, our infrastructure stores:
When you create an account, your email address is stored by the Authentication server to facilitate login. We use JWT-based authentication — no session cookies are used for tracking.
If you subscribe to a paid plan, payments are processed by Stripe, with Link acting as the merchant of record for the transaction — not Klarinotte. Stripe/Link receives your email address, billing address, and payment details directly, and provides subscription management, receipts, and invoices at link.com; we never see or store your card details. Klarinotte's own database stores only your Stripe customer ID, subscription ID, price ID, billing interval (monthly or yearly), subscription status, and current billing period end — the minimum needed to know which tier applies to your account.
This payment data is metadata only. It has no effect on the end-to-end encryption of your note content, which remains governed entirely by section 3.1 above. Because Stripe is legally required to retain billing records such as invoices and receipts, those records survive deletion of your Klarinotte account — deleting your account removes your encrypted notes and cancels your subscription, but does not delete Stripe's billing history.
All synced data — your encrypted notes and attachments, your account record, and the sync metadata described in 3.2 — is stored in the European Union. Our databases and object storage use Cloudflare's jurisdictional restrictions, which guarantee that the data is durably stored within the EU rather than merely preferring an EU location.
To be precise about what this does and does not mean: requests are served by Cloudflare's global network at the location nearest you, so if you are outside the EU your request is handled close to you before reading from EU storage. Your stored data itself never leaves the EU.
Klarinotte includes a minimal integrity check designed exclusively to detect unauthorized, tampered, or rebranded copies of the software running on third-party servers. This is not analytics — it exists solely to verify the app is running on an authorized server, protecting you from tampered versions that could compromise your data.
On a legitimate install (running on app.klarinotte.com), all checks pass and nothing is sent. The endpoint is never contacted. If the app detects it may be running on an unauthorized server, the following minimal data is reported:
This check does not collect: your notes, search queries, browsing habits, personal information, or any content you create.
To be explicit — we do not collect or have access to:
Klarinotte uses the following third-party infrastructure:
No other third-party services receive your data. There are no advertising networks, analytics platforms, or social media trackers.
You have the right to:
We may update this policy from time to time. Material changes will be posted with a new "Last Updated" date. Continued use of Klarinotte after changes constitutes acceptance of the updated policy.
For privacy-related questions or requests, please use our contact form.