Frequently Asked Questions

NOTEPAD-ANON is a free, browser-based tool for creating self-destructing, end-to-end encrypted notes. You write a note (with an optional image), we give you a unique link, and only whoever holds that link can read it. Notes are deleted automatically — either the moment they are first opened, or after 24 hours, whichever comes first. No accounts. No tracking. No logs of your content.

Your note is encrypted in your browser using AES-GCM 256-bit encryption before anything leaves your device. The decryption key is placed in the URL fragment (the part after the #) and is never sent to our server — browsers intentionally omit the fragment from HTTP requests. This means we hold only ciphertext. Even if our database were compromised, an attacker would still need the full link to decrypt anything.

No. We technically cannot. The decryption key lives only in the URL fragment on your side. All we ever store is encrypted ciphertext we cannot decode. This is not a policy promise — it is a cryptographic constraint built into how the service works.

NOTEPAD-ANON requires no account, no email, and no personal information of any kind. We do not associate notes with identities. Standard server infrastructure (e.g., web server access logs) may retain request metadata briefly for operational and security purposes, but this is not linked to note content and is not retained long-term. We never log URL fragments, decryption keys, or plaintext content.

When burn-after-read is enabled, the server permanently deletes the stored ciphertext the moment the recipient opens the note. The link immediately becomes invalid — nobody, including you, can open it again. Important: the recipient can still screenshot or copy the content before it disappears from the server. Burn-after-read protects against the link being accessed a second time, not against the recipient sharing what they saw.

All notes have a hard maximum lifetime of 24 hours from creation. They are deleted automatically when that window expires, regardless of whether anyone read them. If burn-after-read is enabled, deletion happens even sooner — on first access. There is currently no option to extend or restore an expired note.

The note is gone. The decryption key exists only in the URL fragment. We do not have it, cannot reconstruct it, and cannot recover the content on your behalf. Treat the link like a physical key — if you lose it, the lock cannot be opened. Always share the full link (including the # fragment) with your intended recipient before you close your browser tab.

Currently you can include:

• Plain text — up to 100 KB
• One image (JPEG, PNG, WebP, etc.) — up to 2 MB

Support for additional file types is on our roadmap. All content is encrypted in the browser before upload regardless of type.

Yes. To prevent abuse, note creation is rate-limited per IP address. If you hit the limit you will receive an error and need to wait before creating more notes. Limits are intentionally conservative while the service is in its early stage and may be adjusted as the platform grows.

Modern image files (JPEG in particular) often embed EXIF metadata — GPS coordinates, device model, timestamps, and more. NOTEPAD-ANON automatically strips image metadata in your browser before the image is encrypted and sent to the server. This removes embedded EXIF metadata from uploaded images to reduce identity leakage and strengthen your privacy.

Anyone who has the full link — including the # fragment at the end. Share the link only with people you trust. There is no access control beyond link possession. If your link is intercepted, forwarded, or shared without your consent, the recipient can read the note. You can add optional password protection when creating a note for an extra verification step before reveal. For password-protected notes, the recipient has a 5-minute unlock window from first open; if they do not unlock in time, the note is automatically burned.

The encrypted ciphertext is permanently deleted from our database. Once deleted it cannot be recovered — not by us, not by law enforcement, not by anyone. There are no backups of individual note content.

Not yet. The simplest current option is to open the note yourself with burn-after-read enabled, which triggers immediate deletion. Self-serve deletion via a separate management link is something we are considering for a future update.

Yes, the current version is completely free to use. We plan to introduce an optional paid tier in a future release that will offer higher limits and additional features, including video support. The free tier will always remain available for basic use. If you find the service useful, voluntary donations help keep it running — see the donation box on the main page.

No. Use of NOTEPAD-ANON for illegal purposes is strictly prohibited by our Terms of Service.

No. Encryption and decryption happen entirely in your browser using the Web Crypto API. JavaScript is required for the service to function. This is by design — it is what ensures the key never reaches the server.

We are actively working on improvements. Things in the pipeline include larger file support, and an optional premium subscription tier with higher limits and video support. We will not announce specific timelines, but the roadmap is focused on keeping the service private-by-default and abuse-resistant as it grows.