Privacy Policy for CyberNote
Effective Date: October 21, 2026 | Last Revised: October 21, 2026
Welcome to CyberNote ("we", "our", or "the application"). CyberNote is an open-source, client-side, hierarchical knowledge management and note-taking application created by Prekarsha (Prekarshamaxx123). CyberNote is designed with a strict privacy-first, offline-first philosophy.
This Privacy Policy describes in clear, transparent detail how CyberNote handles information, what permissions are requested, how Google user data is accessed, used, and stored, and the extensive controls you retain over your data. This policy applies to all official access endpoints of CyberNote, including:
Core Privacy Principle: CyberNote is an offline-first, client-side application. We do not own, operate, or maintain any centralized database servers that store or collect your personal notes, passwords, or Google credentials. All note storage occurs locally on your personal device, with optional cloud backup directly connecting to your own personal Google Drive account.
1. Information We Collect and Process
CyberNote collects the minimum amount of data necessary to provide you with secure, reliable note-taking services:
- Local Storage (Notes, Drawings & Settings): Your hierarchical notes, notebooks, tags, folder structures, Windows Paint drawings, handwritten signatures, and user preferences are saved directly to your web browser's local client storage (specifically
IndexedDB and localStorage). This data stays entirely on your physical device.
- Client-Side Master Passwords: If you choose to lock specific notes with a password or enable client-side note encryption, passwords are used strictly in client memory to compute SHA-256 hashes or AES-256-GCM decryption keys. Your passwords are never transmitted over the internet or saved to external servers.
- Google Account Information (Optional): If you choose to connect your Google Account for Google Drive Cloud Backup, we receive your basic profile information (display name, email address, and avatar image). This information is used solely to display your active account profile in the workspace header.
2. Google API Permissions and Exact Data Usage
CyberNote provides an optional Google Drive integration allowing users to synchronize and back up their notes to their personal cloud storage. To provide this functionality, CyberNote requests the following explicit Google OAuth 2.0 scopes:
A. https://www.googleapis.com/auth/drive.file (Non-Sensitive Scope)
- What it does: This permission grants CyberNote access to view, create, edit, download, and delete ONLY the specific files and folders created by CyberNote itself.
- How CyberNote uses this permission:
- CyberNote automatically creates a single dedicated folder named
CyberNote on your personal Google Drive.
- CyberNote uploads and downloads your note documents (files prefixed with
cn_ or CyberNote_Backup.json), handwritten signature images, and folder metadata into this single folder.
- Strict Non-Access Guarantee: CyberNote CANNOT and DOES NOT read, access, search, modify, view, or delete any other files, folders, documents, spreadsheets, photos, videos, or personal data in your Google Drive. CyberNote's access is strictly restricted to files that CyberNote itself creates.
B. https://www.googleapis.com/auth/userinfo.profile
- How CyberNote uses this permission: Used exclusively to retrieve your Google display name and profile photo thumbnail so that the workspace header displays your identity and indicates your active connection status.
C. https://www.googleapis.com/auth/userinfo.email
- How CyberNote uses this permission: Used solely to display the connected Google email address in your settings hub, and to guarantee that cloud synchronizations write to the authenticated owner's storage quota.
3. Google API Limited Use Disclosure
Google API Services User Data Policy Compliance:
CyberNote's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Strict Prohibitions: No Sale, No Advertising, No AI Training
We believe your personal notes, creative writings, and thoughts must remain completely private. Therefore, CyberNote adheres to the following strict rules:
- No Sale of User Data: We do not sell, rent, monetize, lease, or trade Google user data or personal notes to any third parties, brokers, or marketing platforms under any circumstances.
- No Advertising or Marketing: CyberNote is 100% ad-free. Google user data is never used, transferred, or disclosed for serving advertisements, retargeting campaigns, or behavioral profiling.
- No AI Model Training: Your notes, Google user data, and documents are NEVER used to train, develop, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.
- No Transfer to Third Parties: CyberNote does not transfer Google user data to third parties, except as strictly required to fulfill user-initiated synchronization directly with Google's official Drive servers.
5. Data Architecture, Storage & Security
CyberNote's technical architecture guarantees security through decentralization:
- Direct Client-to-Google Communication: When you sync notes, your web browser communicates directly with Google's official API servers (
https://www.googleapis.com) using encrypted HTTPS / TLS 1.3 transport. There is no intermediary proxy or proxy server in between.
- Local Ephemeral Tokens: Google OAuth 2.0 access tokens are held in client-side memory and temporary browser storage. They are never transmitted to any third-party server.
- End-to-End Encryption (Optional): You have the option to enable AES-256-GCM encryption with SHA-256 master password key derivation for your notes. When enabled, your note content is encrypted locally on your device prior to saving or syncing.
6. Data Retention and Deletion Rights
Because CyberNote does not maintain external database servers, your data is retained only where you choose to keep it:
- Local Browser Storage: Notes remain on your device's browser until you manually delete them, or until you click
Clear All Local Data in CyberNote Settings.
- Google Drive Storage: Synced files remain in your personal Google Drive inside the
CyberNote folder until you delete them. You can open Google Drive at any time and permanently delete the CyberNote folder or individual note files.
How to Revoke CyberNote's Google Account Permissions
You can revoke CyberNote's access to your Google Account at any time through Google's official security management console:
- Visit your Google Account Security Dashboard: https://myaccount.google.com/permissions
- Find CyberNote under "Third-party apps with account access".
- Click Remove Access.
Upon revoking permissions, CyberNote will immediately lose all ability to access your Google Drive or profile information.
7. Children's Privacy
CyberNote is a general productivity tool and is not directed towards children under the age of 13. We do not knowingly collect or solicit personal information from children under 13.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect new features or regulatory requirements. Any modifications will be posted to this page with an updated "Last Revised" date. We encourage users to periodically review this page.
9. Contact and Developer Information
CyberNote is an open-source project developed and maintained by Prekarsha (Prekarshamaxx123). If you have any questions, feedback, or concerns regarding this Privacy Policy or your data privacy, please contact us: