Privacy Policy.

Who are we?

Duenote is a desktop notebook for studying. This policy explains what this site does with your information: the pages you are reading, the web reader, and the accounts that go with them.

The desktop app itself is not covered by much of it, because it works offline and has no account. Your notebooks are files on your own disk. It reaches the network only to check for a new version and to open whatever you ask it to open in its right-hand panel — neither of which sends us your notes.

What information do we collect?

Only what the thing you asked for needs. In practice that is four groups:

• The notebooks you turn the web reader on for — the title, cover, topics, notes and the text of each note as your app already rendered it, with any bookmarks and margin notes it carries. No other notebook, and nothing else on your computer.
• Your account, if you open one: your name, your email address and a hashed password. Each desktop install you connect gets its own key, also stored hashed.
• A technical record of how your app and our servers talk to each other: which notebook and note were involved, how much moved, from which install and whether it worked. Never anything you wrote — not a note's text, not even its title. While you are signed in, your session also holds your IP address and browser.
• A count of downloads: when you download Duenote from this site, we add one to the tally for that day, installer and version. Nothing about you is kept with it — not your IP address, not your browser, not even a separate record of your download.

What do we use it for?

To show you your notebooks in a browser, to keep you signed in, to answer you when you write to us, to see that syncing is working and is not being abused, and to know how many times each version is downloaded. Nothing else. We do not profile you, we do not advertise to you, and we never sell anything to anyone.

We deliberately do not log what you wrote: not the text of a note, and not even its title.

Cookies and what your browser keeps

One cookie keeps you signed in and one protects forms against forgery. That is all of them — there is no analytics cookie and no advertising cookie, because there is neither. The reader also remembers your theme and a few reading preferences in your own browser, where they stay.

Who do we share it with?

Running this takes a few suppliers: hosting for the servers and database, storage for the desktop downloads, and delivery for the emails we send you. They act only on our instructions and only to provide that service, never for their own purposes. We will name them to you on request. Where a supplier processes data outside your country, we require appropriate safeguards for it.

One thing to know about sharing a notebook yourself: a notebook shared without an account gets a long random link, and anyone holding that link can read it. It is listed nowhere and we ask search engines not to index it, but treat it as you would the key to a door. A notebook under your account is private to you.

How long do we keep it?

No longer than it is useful for:

• A notebook under your account: until you remove it or delete your account.
• A notebook shared without an account: until the deadline you chose when you made the link — one, three or seven days.
• Older shared notebooks with no deadline: 120 days without a change.
• The technical record of that syncing: 30 days.
• Download counts: kept, since they describe no one.

How do we protect it?

Passwords and device keys are stored hashed, so this database leaking would not hand anyone a working credential. A notebook's public link and the key that can overwrite it are deliberately separate, so a link you shared can never be used to change or delete anything. Note content is sanitised before it is ever served to a browser.

What are your rights?

Over the information we hold about you, you can:

• Ask for a copy of it, or ask us to correct it.
• Ask us to delete it, or to restrict or object to how we use it.
• Complain to your national data protection authority.

Changes to this policy

We may update this Privacy Policy from time to time. The revised version takes effect once it is published on the site with an updated effective date.