Privacy Policy
Last updated 24 October 2026
In short
- Your notes stay on your PC. The app doesn't send your notes, usage data or diagnostics to us, and your notes are never used to train AI.
- License activation is the one online step. Activating sends your license key and a random installation ID, never your notes or hardware serial numbers.
- Paddle handles payments on this website as merchant of record, and Microsoft handles Microsoft Store purchases. We never receive your full card details.
- Privacy-friendly website analytics, no advertising. Cloudflare Web Analytics counts visits without cookies. Microsoft Clarity recordings and heatmaps run only if you choose Allow.
- Purchases aren't open yet. Sections 3 and 4 describe what happens once they are.
1. Who we are
ContextNotes is a software brand operated by an independent developer based in Pakistan ("ContextNotes", "we", "us"). The developer operating ContextNotes is responsible for the personal information described here. Contact: support@getcontextnotes.app.
This policy covers the ContextNotes desktop app, this website (getcontextnotes.app), license activation and management, purchases, and support emails.
2. The ContextNotes app
What's stored on your PC
ContextNotes stores your notes in a SQLite database in its private app data in your Windows user profile. This includes:
- note titles and text, formatting, lists and checklists, colors and fonts
- whether a note is done, archived or in Trash, plus edit times and revision details
- each note's attachment: Everywhere, or a specific application. For notes attached to an application, ContextNotes stores that program's identity, such as its location on your PC.
- your preferences, such as rail position, monitor, theme, text size, default font, and automatic backup folder
Which app is in front
To show the right notes, ContextNotes checks which program is currently active. It doesn't read or store the text or contents of other applications' windows.
What leaves your PC
- Your notes are never sent to us or anyone else. There's no telemetry, crash reporting or cloud sync, and your notes aren't used to train AI models.
- We can't see your notes. Support only sees note content if you choose to send it to us.
- If you open a web link from a note, Windows opens it in your browser, and that website receives your visit as usual.
- License activation is described in section 3.
Encryption and access
ContextNotes doesn't add its own encryption to the notes database. Its protection depends on your Windows account and any disk encryption you use, such as BitLocker. Anyone with access to your Windows account may be able to read it.
Backups
Backups you create, manually or automatically, are saved as .cnbackup files in a folder you choose. They contain your notes and settings, not license credentials, and they aren't encrypted. If that folder is synchronized by another service, such as OneDrive, that service will upload them under its own terms.
Deleting your data
You can delete notes in the app. Uninstalling ContextNotes can remove the notes stored on your PC. Keep an independent backup: a backup file saved outside ContextNotes, such as in your Documents folder or on another drive. Backup files you saved elsewhere aren't removed by uninstalling; delete them separately if you no longer need them.
3. License activation
When you activate a license bought through Paddle, ContextNotes sends the following over HTTPS to our licensing service at getcontextnotes.app:
- your license key
- a randomly generated installation identifier. It isn't derived from your hardware, and we don't collect hardware serial numbers, MAC addresses or your Windows username.
Our service stores a hash of the installation identifier, the activation and deactivation times, and the license status. It returns a signed license file, which the app stores on your PC encrypted with Windows' built-in data protection for your user account, separately from your notes. As with any web request, Cloudflare processes your IP address and request details to deliver and protect the service.
After activation, ContextNotes doesn't check in online. Deactivating, or moving to another PC, sends a similar request.
4. Purchases
Paddle.com is our online reseller and merchant of record. When you buy, Paddle collects your payment details, billing information, email address and tax information, and processes them under the Paddle Privacy Notice. We never receive your full card details.
From Paddle, we receive and store in our licensing database (hosted on Cloudflare):
- your email address
- Paddle customer and transaction identifiers
- what you bought, the currency, amounts and tax, and the payment status
- refunds, chargebacks and other adjustments
- your license and its activation history
We use this to deliver and manage your license, provide support, prevent fraud and keep accounting records.
Purchase emails. We send a secure, single-use, time-limited link to your purchase email so you can get your license key and manage your license. We plan to send these emails through our email delivery provider, Resend, which receives your email address and the email's content. We'll update this section if that changes.
Manage license sessions. When you open a secure link, the website sets a Secure, HttpOnly session cookie that keeps you signed in to Manage license for a limited time. It's strictly necessary for that page and isn't used for tracking.
Checkout. Paddle's checkout runs on Paddle's systems and may use cookies needed for payment, security and fraud prevention, as described in Paddle's privacy notice.
Microsoft Store purchases. If you buy ContextNotes through the Microsoft Store, Microsoft processes your purchase and payment details under the Microsoft Privacy Statement. We don't receive your payment details from Microsoft.
5. This website
- No advertising. This website has no advertising, advertising pixels or newsletter sign-ups, and we don't sell or share data for advertising. Its fonts and images are served from this site.
- Cloudflare Web Analytics. To count visits and measure page speed, our public pages load Cloudflare's Web Analytics script. It doesn't use cookies or local storage, and it gives us aggregated figures only: pages viewed, referring websites, country, device type, browser, operating system and page-load performance (Core Web Vitals). See the Cloudflare Privacy Policy.
- Microsoft Clarity, only if you allow it. When Clarity is turned on, you're asked first, and it loads only if you choose Allow. Clarity records how you use our pages: clicks, taps, scrolling, mouse movement, the pages you visit and how you arrived (including campaign tags in links), with your device, browser and approximate location. It creates heatmaps and session recordings and receives a few named website events, such as "demo note opened". Text typed into the demo is masked and isn't captured. Clarity sets first-party cookies (
_clck,_clsk) and Microsoft third-party cookies (such asMUIDandCLID). Microsoft keeps recordings for 30 days, and heatmaps and a sample of recordings for up to 9 months, under the Microsoft Privacy Statement. Clarity is never loaded on license-management or purchase-confirmation pages. If you choose Decline, or your browser sends a Global Privacy Control signal, Clarity isn't loaded. - Your choice is saved in your browser's local storage (
cn-analytics-consent), not in a cookie, so you aren't asked on every page. Change it at any time with Privacy choices at the bottom of each page. Choosing Decline after allowing stops Clarity and deletes its cookies for this site. - The interactive demo runs entirely in your browser. Text you type into its sample notes isn't saved or sent anywhere, is masked from Clarity recordings, and disappears when you reload or leave the page.
- Hosting. The site is hosted on Cloudflare. To deliver it and protect it from abuse, Cloudflare processes technical information about each request, such as your IP address, browser user agent, the page requested and the time. Cloudflare may set strictly necessary security cookies if its protection features are triggered. See the Cloudflare Privacy Policy.
6. Support emails
If you email support, we receive your email address, your message and anything you attach. Mail to support@getcontextnotes.app is forwarded by Cloudflare Email Routing to the mailbox we use for support. We use it only to help with your question and related follow-up. Please don't send private note content, passwords or other sensitive information unless it's needed to solve your problem.
7. Why we use information
Where data protection laws such as the GDPR or UK GDPR apply, we rely on these legal bases:
| Purpose | Information | Legal basis |
|---|---|---|
| Delivering, activating and managing your license | Email, order and license details, activation data | Performing our contract with you |
| Answering support requests | Your email and message | Our legitimate interest in helping you, or performing our contract |
| Accounting and legal obligations | Order and refund records | Legal obligation |
| Preventing fraud and abuse, and securing the website and licensing service | Request data, order and activation data | Legitimate interests |
| Counting visits and measuring page speed (Cloudflare Web Analytics) | Aggregated page, referrer, country, device and performance data, without cookies | Legitimate interests |
| Heatmaps, session recordings and website events (Microsoft Clarity) | Interaction data and cookies, as described in section 5 | Your consent, which you can withdraw at any time |
We don't sell personal information, share it for advertising, or use it for automated decisions with legal effects.
8. Who receives information
- Paddle, merchant of record for payments, tax, receipts and refunds on this website (privacy notice)
- Microsoft, for purchases made through the Microsoft Store and, only if you allow it, Microsoft Clarity website analytics (Microsoft Privacy Statement)
- Cloudflare, which hosts the website and licensing service, its database, email routing and website analytics (privacy policy)
- Resend, our planned email delivery provider for purchase emails (privacy policy)
- our support mailbox provider, which stores support emails
- authorities or others where the law requires it
9. International transfers
These providers may process information in countries other than yours, including the United States and the United Kingdom. Where the law requires, they use recognized safeguards for these transfers, such as standard contractual clauses, as described in their own privacy policies.
10. How long we keep it
- Purchase and license records are kept while your license exists, so you can recover and manage it, and afterwards for as long as needed for tax, accounting, fraud prevention and dispute purposes.
- Activation records are kept with your license, so your activation history stays accurate.
- Support emails are kept for as long as needed to resolve your request and any follow-up.
- Cloudflare request data and Web Analytics are kept under Cloudflare's own retention practices.
- Microsoft Clarity data (only if you allowed it): recordings for 30 days; heatmaps and a sample of recordings for up to 9 months.
When information is no longer needed for these purposes, we delete or anonymize it. We'll also delete it on request where we aren't required to keep it.
11. Security
The website and licensing service use HTTPS. Management links are single-use and expire, license credentials and installation identifiers are stored as hashes on the server, and access to our accounts is limited. No system is perfectly secure, but we take reasonable steps to protect your information.
12. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to restrict or object to its use, to receive a copy of it, and to complain to a data protection authority. To use any of these rights, email support@getcontextnotes.app. We may need to verify that a request comes from you, for example by replying to your purchase email. For payment information that Paddle holds, you can also contact Paddle.
You can withdraw consent to Microsoft Clarity at any time with Privacy choices at the bottom of each page. Your notes are only on your PC, so you control them directly in the app.
13. Children
ContextNotes and this website aren't directed at children, and we don't knowingly collect personal information from children. If you think a child has sent us personal information, contact us and we'll delete it.
14. Changes
We'll update this policy when our practices change, for example when purchases open. The date at the top shows the latest version.
15. Contact
Questions or requests about privacy: support@getcontextnotes.app.