Secure storage

Notes are encrypted before they are stored. The notes look like unreadable ciphertext in the database itself. Only your authenticated session can read or delete your notes; the decryption key stays on the server. This is what a note looks like:

• Traffic uses HTTPS; your session token authorizes access.
• Ciphertext is stored in the database; the key never leaves the server.
• Only the note owner can read or delete their notes.
• Risk profile: if the server or encryption key is compromised, an attacker or rogue operator could access notes.
• For normal use (drafts intended for posting), this risk is considered very low.