Legal
Cookie Policy
Every cookie and browser-storage key this site uses, what each one is for, how long it lasts, and how to get rid of it.
The short version
Inkrypt sets a small number of first-party cookies and browser-storage entries, listed in full below. None of them identify you, because there are no accounts to identify you against. Google's advertising, analytics and consent services set their own cookies under their own names; those are controlled by Google rather than by us, and we describe what they are for rather than reproducing a list that only Google can keep accurate.
Strictly necessary cookies
These are required for the site to function. They are set regardless of consent choices, because without them the features they support simply do not work.
| Name | Purpose | Duration |
|---|---|---|
| viewed_note_<token> | Marks a shared note as already viewed by this browser, so re-opening the same link does not consume an extra view against your view limit | Short-lived, tied to the individual share |
Why the view cookie exists
Analytics cookies
This site uses Google Analytics to measure aggregate traffic — which pages are read, roughly where visitors come from, and whether pages load successfully. It runs under Google Consent Mode: the tag loads with every consent signal set to denied, and analytics storage is used only if your consent choice permits it.
- Denied until your choice allows it. It would not be accurate to say no script is present before you choose. The Google tag does load, but it starts with advertising and analytics storage denied, and may only use them once your consent choice permits it.
- Note names and share links are removed before sending. Page addresses are reduced before they reach Google: any note address is reported as
/[note]and any share link as/share/[token]. No analytics event carries a note name, a note address or a share token. - Note contents can never appear. We cannot read notes, so no analytics event can contain any.
- No cross-site tracking by us. We do not operate advertising pixels or remarketing tags of our own.
Advertising cookies
This site carries advertising on its editorial pages — the blog, feature pages, guides and reference material — which funds a service that is free and requires no account. Where advertising is served, Google may set its own cookies for ad selection, frequency capping and measurement, subject to your consent choice. Where consent is required, it is requested and recorded by Google Privacy & Messaging, Google's own Consent Management Platform configured in our AdSense account. We do not run a consent banner of our own.
Ads never appear on note or share pages
Browser storage that is not a cookie
Two mechanisms deserve mention because they are visible in your browser's storage inspector and people reasonably ask about them.
| Mechanism | What it holds | Lifetime |
|---|---|---|
| sessionStorage | A note password held briefly so that navigating from the home page into a note does not require re-typing it | Cleared when the browser tab is closed |
| Theme preference | Your light/dark display choice | Persistent until cleared |
The sessionStorage entry is the one worth understanding. It exists purely so a single navigation does not force you to type a password twice, it never leaves your browser, and it is destroyed when the tab closes. If you are on a shared or public computer, close the tab when you are finished rather than leaving it open.
Controlling cookies
- Google's consent message, shown by Google Privacy & Messaging where consent is required, is where you accept or reject advertising and analytics purposes. Your choice is recorded by Google rather than by us, and it is what governs whether advertising and analytics storage may be used.
- Your browser settings can block or delete cookies for this site entirely. Blocking the strictly necessary ones may cause shared-note view limits to be consumed faster than expected, and may cause Google's consent message to be shown again.
- Private or incognito windows discard everything when closed, which is a reasonable default for one-off use.
- Clearing site data in your browser removes every item on this page in one action.
What we do not do
- We do not use cookies to build a profile of you across sites.
- We do not fingerprint your browser as a substitute for cookies.
- We do not sell or share cookie data with data brokers.
- We do not enable advertising or analytics storage before your consent choice allows it — Google's tags start with every consent signal denied.
- We do not run a consent banner of our own; consent is handled by Google Privacy & Messaging.
- We do not send note names, note addresses or share tokens to Google Analytics.
- We cannot link any cookie to note contents, because note contents are unreadable to us.
Changes to this policy
If the set of cookies changes, this page is updated and the change recorded on the changelog. Questions about anything here can go to work.securetext@gmail.com.
Frequently asked questions
Do I have to accept cookies to use Inkrypt?
Who shows the consent message, and where is my choice stored?
Do your cookies contain any of my note content?
Why is my note password in sessionStorage?
Do you show ads on shared notes?
How do I delete everything this site has stored?
Privacy without an account
No signup means no profile, no email address on file, and nothing linking your notes to you.
Open the notepad