Privacy policy

Effective 15 October 2026

uNote is a personal library for notes, links and attachments, operated by Boris Gevorkyan. This policy covers the public website and the private-preview application. Contact: 4687778@gmail.com.

Information we use

Google sign-in provides your Google account identifier, name and verified email address. We use these to identify you, control access to your library and display your profile. We do not receive your Google password.

We store the notes, tags, sections, links and attachments you choose to add, along with preferences and records needed to save changes. Server logs may include IP addresses, request paths, timestamps and errors. Optional browser diagnostics record technical timings and errors, not note text or file contents.

Google Drive

Connecting Drive is optional and separate from signing in. We request the drive.file permission, which permits access to files created by uNote or explicitly shared with the app. We do not request unrestricted access to your Drive.

uNote creates a folder in your Drive. If you start a transfer, the background worker uploads attachments and a snapshot of your notes, checks each uploaded attachment and removes its verified working original from our server. Notes and metadata remain in our database. Once transfer is complete, new attachments are stored in your Drive. Files are read through our server when you view them.

We store encrypted Google access and refresh tokens to maintain this connection. Google account data is used to provide these features, not sold, used for advertising or used to train general-purpose AI models. uNote's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Storage, service providers and access

Application data is hosted on OVH infrastructure. Connected files are also processed by Google Drive under your Google account. These providers process data needed to deliver their services. We may access relevant data to resolve a support request you authorize, investigate security incidents or meet legal obligations. We do not sell your information.

Connections use HTTPS. Access to libraries is authenticated; the current preview additionally requires an invitation. Drive credentials are encrypted at rest. The application is not end-to-end encrypted: server-side processing requires access to your notes and requested attachments.

Web clipping

When you choose Clip, uNote saves the page URL, title, readable content and available images as a note. URL clipping fetches public pages without your website login. The optional uNote Clipper extension reads the active page or the Instagram post link you submit only when you invoke it, so you can save content visible after signing in to another website. It sends captured content and accessible images to your uNote account; it does not read or send website cookies or password fields. Forms and scripts are excluded.

The extension keeps a temporary capture in browser extension storage until uNote accepts it or you close its destination tab. Unsubmitted captures expire after 15 minutes and are removed on the next access. Server-side clipping jobs retain unfinished content and errors so you can retry or delete a failed capture. Completed jobs clear the temporary content; the saved note follows the library retention rules below. Images use your selected attachment storage. Clipping does not collect browsing history in the background.

Telegram clipping

If you connect Telegram, we store your Telegram user ID and username to route messages to your library. One-time connection codes are stored as hashes and expire after five minutes. Messages and attachments you send to the bot are processed into notes using your selected storage. Pending jobs retain their content for recovery; completed jobs clear temporary message content. Disconnecting stops new messages from being saved to your library.

Cookies and browser storage

The app uses essential session cookies for sign-in and temporary OAuth cookies. Browser storage remembers preferences such as theme and view settings. Images may be cached privately by your browser, with server access checks before reuse. These public information pages use no analytics or advertising cookies.

Retention and deletion

We keep your library while you use the service. Deleting a note or attachment removes it from the active library. Deletion of a locally stored file is permanent in the app. Copies in Google Drive, note snapshots, import archives or existing backups are not automatically erased by that action; you can remove Drive copies directly in Drive.

To request an export, correction or deletion of your account and retained server-side copies, email us from your account address. We will verify your identity and explain any records that must be retained for legal or security reasons. There is currently no automatic backup-expiry schedule. Google Drive copies remain under your control.

You can revoke uNote's Google permissions in your Google account. Revocation stops future authorized access; it does not itself delete data already stored in uNote or Drive.

Your choices and changes

You can edit your profile and notes, choose whether to connect Drive, and turn optional diagnostics on or off. You may contact us to exercise privacy rights available under applicable law or raise a concern with your data-protection authority. We update this page when practices change and seek fresh consent where a change in Google data use requires it.