Privacy Policy

Information the website handles

• Site visits: Hosting and security providers, including Cloudflare, process network information such as IP addresses, request details and browser headers to deliver and protect the site. Cloudflare may set security cookies.
• Browser preferences: If you save a tool to your favorites, its tool ID is stored in this browser. Your browser may also cache public pages and assets for faster or offline use.
• Accounts, where sign-in is available: Google sign-in provides a Google account identifier (sub), verified email address and optional display name. We use these to identify an account and manage access. We do not request permission to read Gmail, Drive or Contacts for sign-in.
• Support messages: If you email us, we receive your email address and the information you choose to send so we can respond.

Tool inputs and results

How a tool handles its inputs depends on that tool. Its page explains whether processing happens in your browser or on a server, and what storage applies. We do not send raw tool inputs, files, setup keys, codes or results to product analytics.

Text Compare compares text in your browser. Typing, importing a file and pressing Compare do not save your text to your 123note account. If you are signed in and press Save comparison, both texts, your title and comparison options are sent over HTTPS. The texts and options are encrypted on our server; the title remains readable account metadata. You can open or delete saved comparisons from that account. Editing an opened comparison stays on your device until you press Save again.

2FA Authenticator can generate a Quick Code without saving its setup key to your account. If you are signed in, the setup key is sent over HTTPS and stored encrypted on our server only when you press Save to account in the account editor. The server can decrypt saved keys to generate codes while you are signed in and online. 123note operators with access to the server encryption key could also decrypt them. Your Google account session grants access without a separate vault password; keep another recovery method for the Google account you use here. The optional older local vault uses your separate password and remains in this browser until you choose to move or delete its data.

Cookies, analytics and payments

Where sign-in is available, we use a secure, HTTP-only session cookie and a short-lived cookie to link a Google sign-in request to your browser. A Google account is not automatically a CMS administrator. Cloudflare may use security cookies. You can clear local favorites, cookies and cached pages in your browser settings.

We do not currently run product analytics, advertising scripts or a payment checkout on published tool pages. If these are introduced, we will update this policy and explain the relevant data use before activation. No paid tool is currently available.

Why information is used and shared

We use information to deliver the website, protect accounts and services, provide access to features and respond to support requests. Google handles sign-in under its privacy policy. Cloudflare handles traffic under its privacy policy. These providers may process information in different countries. We do not sell your personal information.

Retention and your choices

Sign-in sessions expire after eight hours. Sign-in requests expire after ten minutes; expired state records are removed during later sign-in activity. Account and support records remain while needed for account operation, support or applicable obligations. Saved comparisons and 2FA keys remain in your account until you delete them or request account data deletion. Deletion removes live records; protected database backups follow a rolling 14-day schedule and may retain deleted data until they expire.

You can use Free tools without an account. You can delete individual saved comparisons and 2FA keys in their tools, and remove local favorites or a local vault in your browser. To ask about, access, correct or delete other personal data we hold, contact Sun Steven at mrsunrise2020@gmail.com. We may need to verify your identity before acting on an account request. Depending on where you live, you may have additional data protection rights or the right to contact a relevant authority.

Changes and contact

We will update this policy as the website, tools or data practices change. The updated date below identifies the current version. For privacy questions, email mrsunrise2020@gmail.com.

2FA Authenticator local vault

The optional local vault encrypts entries with your vault password in this browser's IndexedDB. It does not sync automatically when you sign in. Its exported backup remains encrypted. We do not receive local vault passwords, QR images or backup files through the tool. 123note cannot reset a local vault password or restore its contents from the server.

The app shares the 123note.net browser origin with the website. A script running on that origin while your local vault is unlocked could access its data. Keep your device and browser secure, lock the vault when finished, and keep a tested encrypted backup. Browser storage may be removed by the browser or device. No product analytics run in this app.

Base64 Encode & Decode

Text, image and file conversion runs in your browser. No conversion input is sent to us simply by using the tool. If you sign in with Google and press Save conversion, only a UTF-8 text input, its title and format options are sent over HTTPS. The input and options are encrypted on our server; the title remains readable metadata. Avoid sensitive titles. Decoding a saved value must produce UTF-8 text. Files, images, binary results and Data URLs cannot be saved to your account. You can reopen or delete saved conversions. The server encryption key can decrypt account data, so server operators with access to it could read saved text. Saved conversions remain until you delete them or request account data deletion; protected backups may retain deleted data for up to 14 days.