Privacy Policy

Your data, your rules

We don't store your notes. We don't sell your data.
Your notes live on your device and your Google Drive — full stop.

Last updated: May 17, 2026

🔒Privacy FirstYour data stays yours
☁️Your CloudGoogle Drive, not ours
✅No Lock-inExport anytime

OwnSync Notes ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our website at ownsyncnote.com and our web application (collectively, the "Service").

1

Information We Collect

1.1

Account Information

When you create an account, we collect your email address and any profile information you provide. Account registration and authentication is handled by Supabase (supabase.com). Supabase processes your credentials securely on our behalf using industry-standard OAuth and email/password flows. Please review Supabase's Privacy Policy for more details on how they handle authentication data.
1.2

Content You Create

OwnSync Notes stores the notes you create ("Content") locally on your device using browser localStorage. When you enable Cloud Sync, your Content is synced to your personal Google Drive account — not to our servers. We do not read, analyse, or sell your Content.
1.3

Usage and Analytics Data

We use the following analytics services to understand how the Service is used and to improve it:
  • •Umami Cloud — a privacy-first, cookieless analytics platform. Umami collects anonymised page views, referrers, device type, and browser without using cookies or fingerprinting. No personally identifiable information is sent. See Umami's Privacy Policy.
  • •Cloudflare Analytics — collects aggregate, privacy-preserving metrics about traffic (page views, request counts) without cookies or cross-site tracking. See Cloudflare's Privacy Policy.
1.4

Error and Performance Monitoring

We use Vercel to host the application and monitor errors and performance. Vercel may collect your IP address, browser type, operating system, and request metadata (e.g. response times, error codes). This data is used solely to diagnose issues and ensure reliability. See Vercel's Privacy Policy.
1.5

Payment Information

If you subscribe to OwnSync Notes Pro, payments are processed by Lemon Squeezy. We do not store your payment card details on our servers. Lemon Squeezy handles all billing data in accordance with PCI-DSS standards. See Lemon Squeezy's Privacy Policy.
1.6

Log Data

Our infrastructure (hosted on Vercel) may automatically record standard server log data such as your IP address, request timestamps, and HTTP response codes. This data is used for security and operational purposes and is not linked to your account beyond what is technically necessary.
2

How We Use Your Information

We use the information we collect to:

  • ✓Provide, operate, and maintain the Service
  • ✓Authenticate your account and keep it secure
  • ✓Sync your Content to your personal Google Drive
  • ✓Process subscription payments and manage billing
  • ✓Diagnose bugs, errors, and performance issues
  • ✓Understand how the Service is used (in aggregate) to improve it
  • ✓Send transactional emails (e.g. password resets, billing receipts) via Supabase or Lemon Squeezy
  • ✓Comply with applicable legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising targeting.

3

Cookies and Tracking

OwnSync Notes uses minimal cookies for authentication session management via Supabase. We do not use advertising or third-party tracking cookies.

Both Umami Cloud and Cloudflare Analytics are cookieless — they do not track users across websites or set any persistent identifiers.

You can control cookie preferences through your browser settings. Disabling cookies may affect authentication and your ability to use the Service.

4

Data Storage and Security

Your note Content is stored locally on your device (browser localStorage). When Cloud Sync is enabled, Content is written directly to your own Google Drive — we never have access to it on our servers.

Account data (email, subscription status) is stored in Supabase with encryption at rest and TLS in transit. The Service itself is hosted on Vercel's global edge network.

While we take reasonable precautions, no system is 100% secure. We encourage you to use a strong, unique password for your account.

5

Data Sharing

We share your data only with the following categories of third parties:

  • •Supabase — account authentication and user management
  • •Google — Cloud Sync via Google Drive API
  • •Vercel — hosting, deployment, and performance monitoring
  • •Umami Cloud — cookieless, privacy-first website analytics
  • •Cloudflare — CDN, DDoS protection, and aggregate analytics
  • •Lemon Squeezy — payment processing for Pro subscriptions

We may also disclose your information if required by law, legal process, or to protect the rights, safety, or property of OwnSync Notes or others.

6

Data Retention

We retain your account data for as long as your account is active. Your note Content remains on your device and Google Drive under your full control — you can delete it at any time.

If you delete your account, we will remove your account data from Supabase within 30 days, except where retention is required by law (e.g. billing records retained for tax purposes).

Analytics data collected by Umami Cloud and Cloudflare Analytics is retained per those services' default policies. Vercel log data is retained for 30 days.

7

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • •Access — request a copy of the data we hold about you
  • •Correction — request that inaccurate data be corrected
  • •Deletion — request that your account and data be deleted
  • •Portability — export your notes as Markdown or JSON at any time from the app
  • •Objection — object to certain processing of your data
  • •Opt-out of analytics — use a browser-level do-not-track or ad-blocker setting; Umami respects these automatically

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8

Children's Privacy

OwnSync Notes is not directed to children under 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9

International Transfers

OwnSync Notes uses globally distributed infrastructure (Vercel, Supabase, Cloudflare). Your data may be processed in countries outside your own, including the United States. Where required, we rely on appropriate safeguards provided by our third-party service providers for international data transfers.
10

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we may notify you via email or an in-app notice. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
Privacy Policy