Privacy Policy

Last update: 24 Sep 2026

This Privacy Policy applies to Notefox Account (the current version is v2), and to the optional Telemetry and Error logs features. If you do not use any of these, the Notefox add-on does not collect or send any data to the server.

Notefox: websites notes is an open-source project developed by Saverio Morelli (saveriomorelli.com/contact-me), based in Italy. The service is hosted on Aruba.it servers, located in Italy.

1. Notefox Account (v2)

Notefox Account v2 allows you to synchronize your notes across multiple devices and access them anywhere. The v2 system uses a modern encryption architecture with a Data Encryption Key (DEK) model. When using Notefox Account v2, the service collects and stores:

• Your email — stored only as a SHA-512 hash. The server never stores your email in plaintext; it is used solely to send verification and notification emails, then immediately discarded.
• Your public IP address (stored unencrypted, used for security monitoring and rate limiting)
• Your username and data (notes, settings, etc.) — encrypted at rest with AES-256-CBC using a per-account DEK (Data Encryption Key)

Your password is never stored on the server. It is used to derive a Key Encryption Key (KEK) via PBKDF2 (SHA-256, 210,000 iterations), which wraps and unwraps the DEK. The DEK encrypts all your data across all services. Changing your password only re-wraps the DEK (~100 bytes) — your notes are never re-encrypted. If you lose or forget your password, your data cannot be recovered.

Two-Factor Authentication (OTP) is enabled by default on every account. When you log in, a verification code is sent to your email. This ensures that even if your password is compromised, an attacker cannot access your account without also having access to your email inbox. OTP can be disabled from your account settings.

Sessions are identified by a 64-character login-id and token pair. Sessions can optionally have an expiry date. A session without expiry stays valid until you explicitly log out or change your password. Changing the password invalidates all other sessions.

The service retains only your most recent synchronized data. If sync history is enabled for your account, past versions are also retained (encrypted with the same DEK). Older entries may be pruned to optimize storage.

The service does not use cookies and does not track users. IP addresses are collected only for security and statistical purposes, and are not shared with third parties.

Emails

Notefox may send you emails only in the following cases:

• When you sign up: to confirm your account
• When your account is created: confirmation message
• When you log in: to confirm your login (Two-Factor Authentication)
• When your account is accessed: login notification
• When you request a password change: confirmation code
• When you change your OTP settings: notification email
• When you request account deletion: confirmation email
• When your account is deleted: final confirmation

Notefox will never send spam, marketing, or promotional emails, and will never ask for your data, password, or any sensitive information.

Legacy accounts (v1)

If you created your account before the v2 migration, your account may still use the v1 system. V1 uses a simpler encryption model where data is encrypted directly with a key derived from your password. V1 accounts are fully supported and can authenticate with both v1 and v2 endpoints. The v1 system does not include DEK-based encryption, sync history, or session expiry features.

2. Telemetry

If enabled, Notefox collects anonymous telemetry data about the usage of the add-on, to improve the product and fix bugs more effectively. Telemetry can be enabled with or without a Notefox Account.

Collected data may include:

• Whether a Notefox Account is active (true/false)
• Anonymous user ID (a random string that does not identify you)
• Date and time (client-side and server-side)
• Browser language
• Action performed (e.g., "save-note", "delete-note")
• Context (e.g., "options-page", "popup")
• Website URL (if applicable)
• Browser name and version
• Notefox version
• Operating system (if detectable)

Telemetry data are used exclusively for anonymous internal statistics to analyze usability and the most used features. They are not shared with third parties and cannot identify you.

3. Error Logs

If enabled, Notefox may collect anonymous error logs to detect and fix bugs more effectively. This can also be enabled without a Notefox Account.

Collected data may include:

• Anonymous user ID (non-identifiable)
• Date and time (client-side and server-side)
• Context (e.g., "options-page", "popup")
• Error message
• Website URL (if applicable)
• Notefox version

Error logs data are used only for debugging and technical improvement. They are anonymous, not shared with third parties, and not used for statistical or marketing purposes.

Error logs older than 30 days are automatically deleted from the server.

4. Security Notice

If you notice any suspicious activity, please change your password immediately. Notefox will never ask for your password or sensitive information.

5. Liability

Saverio Morelli is not responsible for any loss, corruption, or misuse of data, nor for damages caused by the use or inability to use the service. Users are fully responsible for how they use the Notefox add-on and their stored data.

6. Contact Form

When you use the contact form on this website, we collect the following information:

• Name — to address you in our response.
• Email address — to send you a confirmation and reply to your message.
• Topic — to categorize your request (Bug, Report, Suggestion, or Other).
• Notefox version (optional) — to help us identify the version you are using.
• Web browser — to understand the browser environment where you encountered the issue.
• Operating system (optional) — to help us reproduce and diagnose the issue.
• Message — the content of your inquiry.
• Browser language — automatically detected from your browser settings, to help us respond in the appropriate language.
• Timezone — automatically detected from your browser settings, to understand your approximate location without using IP geolocation.

This data is used exclusively to respond to your inquiry. We do not share it with third parties. A confirmation email is sent to the address you provide. Messages are stored only in the developer's mailbox and are not linked to any Notefox account.

The contact form uses Altcha, a privacy-friendly CAPTCHA that works entirely on your device without sending personal data to third parties.

7. Changes

The current Privacy Policy can be updated at any time. It is your responsibility to check it periodically.

* Passwords and emails are encrypted using SHA-512; user data (notes, settings, etc.) are encrypted with AES-256. IP addresses are stored unencrypted.