Privacy Policy

Side Notepad is a local-first notepad. The free Chrome extension makes zero network calls— your notes live in your browser's IndexedDB and never leave your device. You only share data with us if you sign in to enable cloud sync (Pro).

We collect the minimum needed to run the service you opt into.

• If you only use the free extension: nothing. No account, no analytics, no telemetry, no network requests.
• If you sign in: your email address, via Supabase Auth (Google OAuth). We use it to identify your account and send transactional messages.
• If you subscribe to Pro: your note content (title, rich-text body, a plain-text copy used for search, last-modified timestamp, size), and subscription state (plan, status, renewal date, Dodo customer ID).

Payment details (card number, billing address) go directly to our payment processor, Dodo Payments, and never touch our servers. We only store the identifiers Dodo returns so we can look up your subscription.

• Supabase (Postgres + Realtime) holds your profile, notes, and subscription state. Rows are protected by Row-Level Security — only your authenticated session can read or write your rows. Data is encrypted at rest.
• Dodo Payments (our Merchant of Record) holds your billing and payment information under their own privacy policy.
• Your browser holds a local IndexedDB copy of your notes so the extension keeps working offline.

• Sync your notes across the devices you sign in on.
• Run full-text search over your own notes.
• Process your Pro subscription (start, renew, cancel).
• Reply to you if you email support, and send service-related emails (receipts, payment failures, account security).

We do not sell your data. We do not share it with advertisers. We do not use your note content to train machine-learning models.

• Get a copy of your notes: email sunilkm2610@gmail.com from your account email and we'll send you an export of the notes we hold for you.
• Delete: one click on your account page cancels your subscription via Dodo, deletes your Supabase auth user, and cascades every related row (profile, notes, subscription) out of our database.
• Sign out: your local notes keep working. We stop syncing until you sign back in.
• Access or correction: email us at sunilkm2610@gmail.com for anything the account page doesn't cover.

Deleted notes are soft-deleted (a tombstone row with adeleted_attimestamp) so other devices can drop their local copy on the next sync. A nightly job hard-deletes those rows after 30 days. When you delete your account, everything is removed immediately — no soft-delete window.

The website sets a Supabase authentication cookie when you sign in so you stay logged in. There are no advertising cookies, no third-party analytics that identify you, and no tracking pixels.

Side Notepad isn't directed at anyone under 13. We don't knowingly collect information from children. If you believe a child has created an account, email us and we'll remove it.

If we make a material change, we'll update the “Last updated” date above and, for significant changes, notify signed-in users by email before the change takes effect.

Questions about this policy, a privacy request, or anything in between — email sunilkm2610@gmail.com.