Privacy

Effective August 20, 2026. Unmistakable LLC operates Notes.FYI. This policy explains the information handled when you read a note, use an invited publishing account, or contact us.

Information Notes.FYI handles

When anyone visits Notes.FYI, the hosting and delivery systems may process request information such as the IP address, requested URL, referrer, browser and device context, timestamps, and security or performance logs.

Invited publishers provide an email address and authentication credentials. The service also stores account and delegation records, authored notes and versions, publishing metadata, and uploaded media. Notes.FYI does not store plaintext passwords. If you contact us, we receive the contact information and message you choose to send.

How information is used

Information is used to deliver and secure the site, authenticate invited accounts, save and publish notes, maintain recovery copies, respond to requests, diagnose failures, and understand limited readership activity. Notes.FYI does not sell personal information or share it for cross-context behavioral advertising.

Publishing visibility

Public notes may appear in Notes.FYI discovery pages, feeds, search engines, link previews, and other services that receive their URLs. Unlisted notes are omitted from Notes.FYI discovery and feeds, but anyone with the link can open and reshare them. Private notes require authorized access. Changing visibility or deleting a note cannot immediately remove copies already held by search engines, social networks, recipients, or other services outside Notes.FYI's control.

Limited readership analytics

Notes.FYI uses Usermaven to understand whether published public and unlisted notes are being read, whether readers use the site's Share control, and where visits came from. A white-labeled Usermaven pixel receives the note URL and title, referrer and campaign information, browser and device context, and the note's stable ID and visibility. Usermaven also derives approximate city and country from the request's IP address. A share event is sent only after the native Share action completes or the canonical note link is copied.

Usermaven runs in strict cookieless mode. It does not set a visitor cookie; instead, it uses a fingerprint based mainly on IP address and user agent to approximate unique and returning readers. Notes.FYI does not identify readers, enable cross-domain linking, capture forms or general clicks, or persist the pixel's event queue in browser storage. Note contents, form values, email addresses, and Notes.FYI account identities are not sent.

Private notes, owner previews, authoring pages, account pages, discovery pages, feeds, media, and share images do not load the pixel. You can block the white-labeled analytics request with browser or network controls without affecting access to a note.

Cookies and tracking choices

Signed-in accounts use essential session cookies for authentication and security. Usermaven's strict mode does not set an analytics cookie. Notes.FYI does not currently change its limited note analytics in response to Do Not Track or Global Privacy Control signals; it does not use advertising or cross-site behavioral tracking and offers no sale or advertising-sharing opt-out because those practices do not occur.

Service providers

Notes.FYI uses service providers only to operate the product: Vercel for hosting and delivery, Supabase for authentication, database, and private media storage, and Usermaven for the limited analytics described above. Encrypted recovery copies may also be stored with cloud infrastructure providers. These providers process information on Notes.FYI's behalf under their applicable terms and privacy commitments. Their policies are available from Vercel, Supabase, and Usermaven. Information may also be disclosed when required by law or reasonably necessary to protect the service, its users, or others.

Retention and deletion

Notes.FYI keeps information for as long as needed for the purposes described here, including operating accounts, preserving publication history, securing the service, meeting legal obligations, and recovering from failures. Deleting a note through the product places it in a recoverable deleted state rather than immediately erasing its versions, media, or related records. Backups remain until their ordinary rotation or expiry. Usermaven analytics remain subject to the workspace's configured retention and deletion controls and are removed when no longer needed or when deletion is required.

Your choices and requests

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain uses. We may need to verify your identity and may retain information when permitted or required by law. Notes.FYI will not discriminate against you for making a privacy request.

Security and international processing

Notes.FYI uses reasonable technical and organizational safeguards, but no online service can guarantee absolute security. Service providers may process information in the United States and other countries where they operate, which may have different data-protection laws from your location.

Children

Notes.FYI is not directed to children under 13, and Unmistakable LLC does not knowingly collect personal information from them. Contact us if you believe a child has provided personal information through the service.

Policy changes and contact

This page will be updated when practices materially change, and the effective date above will change with it. For privacy questions or requests to access, correct, or delete personal information, email privacy@notes.fyi.