Terms of Service

Last update: 24 Sep 2026

Notefox: websites notes is an open-source project developed by Saverio Morelli (saveriomorelli.com/contact-me), based in Italy. The following Terms of Service apply to the use of Notefox and its services.

1. Scope

These Terms of Service apply to the use of Notefox Account (currently v2), as well as to the optional Telemetry and Error logs features. By using these services, you accept these Terms in full.

2. License

Notefox is released under the Mozilla Public License v2.0 (MPL v2). You are free to use, modify, and distribute it under the terms of the MPL v2.

3. Notefox Account (v2)

Notefox Account v2 allows users to synchronize their notes across devices and access them from anywhere. The service uses end-to-end encryption with a per-account Data Encryption Key (DEK) wrapped by a Key Encryption Key (KEK) derived from your password. The server cannot read your data.

All data stored server-side are encrypted and cannot be read without the user's password. The service is provided free of charge, "as is", with no guarantee of availability, continuity, or data integrity. Two-Factor Authentication (OTP) is enabled by default; login requires email verification unless explicitly disabled by the user.

Rate limiting is applied per account to protect the shared platform. Exceeding the limits results in a temporary block. Sessions are identified by a login-id and token pair and can have optional expiry dates. Changing the password invalidates all other active sessions.

Legacy accounts (v1)

Accounts created before the v2 migration continue to work with the v1 system. V1 uses a simpler encryption model without DEK-based key management. V1 accounts are fully supported but do not have access to v2-specific features such as sync history or session expiry.

4. Rate Limiting

To protect the service and ensure fair usage, rate limiting is applied to all endpoints. Limits vary by action type (e.g., login, sync, account management) and are enforced per account or per IP address. Exceeding rate limits results in a temporary block (HTTP 429). These limits may change without prior notice.

5. Data Collection

The service may collect certain data:

• IP addresses (stored unencrypted, used for security and statistics)
• Telemetry data (anonymous usage statistics, optional and user-consented)
• Error logs data (anonymous debugging data, optional and user-consented)

Telemetry data are used only for anonymous internal statistics on usability and feature usage, while Error logs are used exclusively to identify and fix technical issues. All data are anonymized and never shared with third parties.

6. Responsibility and Disclaimer

Saverio Morelli does not guarantee that the service will be uninterrupted, error-free, or permanently available. He is not responsible for any data loss, corruption, or damage resulting from the use or inability to use Notefox.

Users are solely responsible for how they use the service and for ensuring that their data are backed up and handled securely.

7. Changes to the Service

The Notefox service may change, be suspended, or terminated at any time without prior notice. Users are encouraged to periodically review these Terms of Service.

8. Contact

For questions or more details, please use the contact form or visit saveriomorelli.com.