Privacy Policy

We collect only what is necessary to provide the service:

• Email address and display name — provided when you create an account. We use your email to identify your account and to send transactional messages (invite notifications, password reset).
• Password — stored as a one-way bcrypt hash. We never store or transmit your plaintext password.
• Board content — the whiteboards, notes, and any media you create and save inside QSNotes. This content is stored in our database and is associated with your account.
• Discord profile (optional)— if you choose to sign in with Discord, we receive your Discord user ID, username, and avatar from Discord's OAuth API. We use this only to authenticate you and populate your display name and avatar. We do not post on your behalf or access your Discord servers.
• Usage data — basic server logs (timestamps, request paths, HTTP status codes) are kept for a short period for security and debugging purposes. We do not build behavioral profiles from these logs.

We use the information listed above solely to:

• Operate the QSNotes service and authenticate your account.
• Display your boards and collaborate with teammates you invite.
• Send you transactional emails you explicitly trigger (team invites, password resets). We do not send marketing emails unless you opt in.
• Diagnose and fix technical problems using server logs.

We do not use your data to train machine-learning models, build advertising profiles, or sell insights to third parties.

QSNotes uses a single session cookie to keep you signed in. This cookie is HTTP-only, scoped to qsnotes.xyz, and expires when you sign out or after a period of inactivity.

We do not use advertising cookies, third-party tracking pixels, or analytics scripts that report to external services. There are no cookie consent banners because there is nothing to consent to beyond the functional session cookie required to use the app.

Your data is stored in our database hosted on Hostinger infrastructure in the EU and US. We use HTTPS for all data in transit. Passwords are never stored in readable form. We apply standard security practices (access controls, encrypted connections, regular dependency updates) to protect the data we hold.

No system is perfectly secure. If we become aware of a breach that affects your data, we will notify you promptly by email.

We do not sell, rent, or trade your personal information. We share your data only in these narrow circumstances:

• With teammates you invite — when you invite someone to a project, they can see your display name and the boards in that project. They cannot see your email address, other projects, or personal boards unless you share them.
• Service providers — hosting and infrastructure providers (Hostinger) process data on our behalf under confidentiality obligations. We do not use third-party analytics or ad networks.
• Legal requirements — we may disclose information if required by law, court order, or to protect the safety of our users or the integrity of the service.

You can request the following at any time by emailing support@qsnotes.xyz:

• Export — a copy of the data we hold about your account and boards.
• Correction — update inaccurate information (your display name can be changed directly in account settings).
• Deletion — delete your account and all associated boards and personal data. This is permanent and cannot be undone.

We will respond to requests within 30 days.

QSNotes is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

We may update this policy as the service evolves. When we make material changes we will update the effective date at the top of this page and, where appropriate, notify registered users by email. Continued use of QSNotes after changes take effect constitutes acceptance of the revised policy.

If you have questions or concerns about this policy or about how we handle your data, contact us at: support@qsnotes.xyz