These rules govern your use of Noteheld
Noteheld operates Noteheld at itsme.tail24ad1e.ts.net. These rules are the agreement for that service. Prices and caps are the ones on the pricing page.
These rules take effect on [[OPERATOR: launch date]].
1. Who operates Noteheld
Noteheld operates Noteheld at itsme.tail24ad1e.ts.net. Noteheld is built and run by an independent developer in California. A business-name registration is not shown on this page. You are contracting with that operator, under the name Noteheld.
You agree by creating a workspace, or by using a key or a view link. If you give a key to an agent, you are responsible for what it does with that key.
Governing law: the State of California. Court cases are brought in the state or federal courts located in California. These terms do not require arbitration. Please write to contact@noteheld.com and allow 30 days before you file a lawsuit, unless a deadline would be lost by waiting.
We do not publish where the servers are. The operator is in the United States. Version 1 does not include more than one region.
Questions: contact@noteheld.com. Security reports: security@noteheld.com. Abuse reports: abuse@noteheld.com.
2. The service
Noteheld hosts notes. Agents write and edit them. You review and correct them. There is no account.
A workspace is the notes, folders, and history opened by one master key. A scoped key reads or writes one folder. You can set its expiry and revoke it. Revocation takes effect on the next request. A master key grants the whole workspace until you revoke or rotate it.
A view link lets someone read a note or a folder without a key.
This version stores text only, not attachments.
You must be at least 13 years old. United States law restricts collecting personal information from children under 13, and this service is not for them. There is no account, so we do not ask your age and we cannot check it. Do not use Noteheld if you are under 13. If the place where you live requires an older age to use an online service, you must be that old. We do not knowingly collect personal information from a child under 13. If we learn a workspace was opened by someone under 13, we suspend it and then delete it with its notes.
3. Email
Noteheld does not ask for an email to create a workspace. There is no profile tied to a person.
The payment provider collects an email at checkout. A contact form or an abuse form can include an email you choose to type. Noteheld does not load third-party analytics or fonts in this version.
Pasting a key or using a passkey sets one HttpOnly session cookie for this host. It is not a tracking cookie. It stays active for 14 days after the last use and ends 30 days after it starts, on every plan. Revoking the key drops sessions tied to that key.
4. How notes are stored
Notes are stored on the server as plaintext so the product can search, outline and edit by line. Version 1 does not encrypt note bodies end to end.
The site and API are served over HTTPS. API keys and view-link secrets are stored as SHA-256 hashes. A copy of the database does not contain a usable key. It does contain the note text.
The live database files are plaintext. When the operator's backup key is set, Noteheld takes an encrypted snapshot on a daily schedule and keeps those snapshots for 14 days. A snapshot is a copy of the notes. Restoring an older backup can bring back a key that was revoked after the snapshot, and a workspace that was deleted after the snapshot.
You keep ownership of the text you store. You grant Noteheld a license to host, index, display, back up, and transmit that text only to operate Noteheld. The license is not exclusive. It does not allow us to sell your notes or to send them to a model. It lasts while we still hold a copy, including a backup, and it ends when that copy is deleted.
For privacy law, Noteheld is the controller for site data: the session cookie, network-address hashes, contact messages, and abuse reports. Noteheld is a processor for the note text you store. You choose that text. We host it to run Noteheld, and the operator of the server can read it.
Deleting a note keeps it restorable until the workspace itself is deleted. Deleting the workspace removes notes, history, keys, and view links. Noteheld cannot restore a workspace after that deletion.
5. Keys and recovery
A leaked master key can read and change the workspace until you revoke it or rotate it. Rotating the master key does not revoke scoped keys unless you choose to. A leaked folder key reaches that folder until you revoke it or it expires, and it does not grant the rest of the workspace.
The view-link secret sits in the URL fragment. The page sends it as a header. Noteheld stores a hash of it. Logs are designed to drop that header. View links are part of Pro. A view link with no expiry works until someone revokes it. That is not a safer link.
Content returned to agents is marked as stored data and carries provenance. This does not stop a model from following text inside a note. A folder key limits what that key can touch inside Noteheld. It does not limit tools the agent has elsewhere.
The recovery kit is a file on your machine that contains the master key. We do not store it. Anyone with that file can read and change the workspace, mint keys, and rotate the master key. We cannot recover the workspace if the master key, the recovery kit, and the passkey are all gone. A passkey can sign you in and rotate the master key. The server does not store a copy of the master key it can show you again.
Writes are scanned for known secret formats. The detector list is finite. The default replaces a match with [REDACTED:type] and says so in the response. You can choose block or warn. Warn stores the secret. Revisions saved before a redaction keep their text.
The human UI sanitizes markdown and does not load remote images.
6. Price
The comparison of Free and Pro is on /pricing. The price is per workspace. Agents are not seats. Reads are not billed.
Pro is $10 a month or $48 a year. Monthly and yearly prices are shown together. Yearly billing is not pre-selected.
Pro renews at the interval chosen at checkout. Cancel before renewal and you are not charged again. Free does not need a card.
You pay, switch interval, and cancel on the Plan page.
Opening workspaces is limited per network on every plan. Paying does not raise that rate. A paid workspace does not count toward the cap on active Free workspaces.
Prices on /pricing do not include a tax line. If a law requires a tax on a charge, that tax can be added to the charge. This page does not state a tax registration. These terms set no late fee and no retry schedule. A charge that is not paid does not delete notes. Paid use follows a period that was paid.
7. Cancel and refund
You cancel on the Plan page. Cancellation takes effect at the end of the period you already paid for. Noteheld does not charge you again after that. The workspace then follows the Free limits. Email is not a way to cancel.
Within 14 days of any charge, you can get a full refund of that charge on the Plan page or by email to contact@noteheld.com. After 14 days, Noteheld does not refund unused time.
A refund ends paid access for that charge immediately and moves the workspace to Free. No notes are deleted. The Free idle clock starts at that moment.
Downgrade does not delete notes. If the workspace is over the Free caps, you can still read it and export it. You can still make a change that does not grow it. A write that would grow it fails. The idle clock starts when the workspace moves to Free.
8. How long notes stay
On day 60, Noteheld warns you on agent calls and on a workspace banner. It has no address to email.
On day 90, the workspace is read-only. Export still works. Writes stop. View links stop. The master key can reactivate it before the purge, and reactivation starts the idle count over.
On day 120, the workspace is deleted.
A read or a write with a key resets the count. A read or a write in a browser session resets the count. A visit through a view link does not. A request with no key does not.
Pro does not expire because it is idle.
On the Free plan, Noteheld keeps every revision for 30 days, then one checkpoint per note per day for 365 days. The current text stays. The checkpoint is the latest revision from that day. The change feed keeps events for 14 days on Free and 180 days on Pro.
Pro keeps every revision while the workspace is inside its storage cap. They do not thin history by age. At the cap, reads still work. A write that would grow the workspace fails. Nothing is deleted to make room.
Export of the current tree as markdown works on every plan, including while a Free workspace is read-only and after a downgrade. Pro also exports a revision archive. Export does not survive deletion of the workspace, including the purge on day 120.
9. Network addresses
Noteheld does not store the raw IP address for rate limits or abuse reports. It stores an HMAC-SHA-256 of the address. The salt rotates every 24 hours. The previous salt is kept for one rotation. Rate-limit snapshots are deleted after 48 hours. Abuse reports are kept for 180 days, and they do not include the note body.
Creating a workspace without an email does not mean Noteheld stores nothing about a client. It stores those hashes, and it stores the notes you write.
10. Suspension
You follow the rules at /acceptable-use. Noteheld may suspend a workspace. While a workspace is suspended, its keys and view links do not work. Suspension does not delete it. Suspension does not pause the Free idle schedule; paid workspaces never idle-expire. The holder can delete a workspace that is not suspended. The holder cannot delete it while it is suspended.
Noteheld does not promise to read every note. We may review a workspace after an abuse report, a security report, or a lawful request, and we may suspend it. We may give note text to an authority when the law requires it, or when we in good faith believe the text is sexual content involving a minor or an imminent threat of serious harm. We may not tell you before we do that. There is no account, so a workspace usually has no email we can write to.
11. Changes and liability
Noteheld may change these terms by posting the new version on this page with its new effective date, and by recording a changelog entry. It has no address to email you about the change. Noteheld does not promise a workspace banner before a terms change. The change applies on the effective date posted here. That date is the posting day or a later day. We do not promise a minimum number of days of notice. If you keep using Noteheld after the effective date, the new terms apply. If you do not want them, delete the workspace before that date, unless it is suspended. A change to a price applies to a later paid period, not to time you already paid for.
Noteheld does not promise a particular uptime.
Noteheld is provided as is and as available. We do not promise that it will be uninterrupted or free of errors, or that it will fit a particular purpose. To the extent the law allows, we disclaim the warranties of merchantability, fitness for a particular purpose, and non-infringement.
To the extent the law allows, Noteheld is not liable for indirect harm. That includes lost profits, lost notes, and other consequential damages. Our total liability for a claim is the amount you paid us in the 12 months before the claim, or $50 if that is more.
If a law does not allow a limit written here, that limit applies only as far as the law allows.
If someone else brings a claim that text your keys stored, or the way those keys were used, broke the law or someone else's rights, you will cover Noteheld for the loss and for reasonable legal cost. You do not cover us for our own fraud or willful misconduct.
If a court strikes one part of these terms, the rest remains. After this agreement ends, the following still apply: the license for as long as we hold a copy, acceptable use, suspension, a refund already paid, the warranty disclaimer, the limit on liability, your duty to cover us, and the governing law and courts.
You may stop using Noteheld at any time. Deleting a workspace that is not suspended ends the agreement for that workspace. We may suspend access under section 10.
12. Contact
Questions about these terms: contact@noteheld.com.