Scratchpad

Privacy policy

Your notes stay on your device.

Scratchpad is a local-only notes app. There is no account to create, no server to send your notes to, and no telemetry. This page describes exactly what that means in practice.

The short version

What we store, and where

Scratchpad stores only the local state needed to run the app and protect your work.

This data is scoped to this origin. Other sites cannot read it; we cannot read it. Tabs on this origin exchange note ids, timestamps, and change types so Scratchpad can detect edit conflicts, but note titles and bodies are not sent through that channel or off the device.

Storage protection

Where supported, About → Protect local data asks the browser to make this origin's storage persistent. The browser decides whether to grant the request. Persistent storage reduces automatic eviction risk, but it does not replace backups and does not prevent you from clearing site data yourself.

What we don't do

Your data, your control

Use About → Export backup (JSON) for a portable copy of your notes, Trash, and revision history. An encrypted backup protects the same data with a passphrase using the browser's local cryptography APIs. The passphrase and encryption key are never stored; a forgotten passphrase cannot be recovered. You can also export active notes as Markdown or import one or more .md files.

Deleting a note moves it to Trash, where it stays recoverable for 30 days. After that, Scratchpad permanently removes the note along with its drafts and revision history. "Delete forever" and "Empty Trash" remove notes immediately, with no recovery.

Use About → Erase local data and type ERASE to remove every note, draft, revision, folder, and Scratchpad preference from this browser. Clearing site data in browser settings has the same effect and also removes the offline app cache.

Hosting

Scratchpad is delivered as static files from a content delivery network. The host can see the request for index.html and related assets (this is how the web works), but it never sees the contents of your notes — those never leave your browser.

Children's privacy

Scratchpad does not collect personal information from anyone, including children. There is no account, no profile, and no contact form.

Changes to this policy

If the privacy posture of the app ever changes — for example, if an optional sync feature were added later — this page would be updated and would describe the new behavior in plain terms. Any such change would remain opt-in.

Questions

Scratchpad is built by Vinny Carpenter. If something on this page is unclear, the source code is the authoritative record of what the app actually does.