# Privacy policy > Evergist privacy policy: we store encrypted notes we cannot read and three anonymous daily counters. No cookies, no analytics, no IP logs. Source: https://evergist.com/privacy/ Updated: 2026-09-29 This policy is short because there isn't much to say. Evergist is designed so we hold as little as possible, and nothing that tells us who you are. ## What we store **Encrypted notes.** When you create a note, your device encrypts it before upload. We store the ciphertext along with its expiry time, view limit, views left, a count of wrong password attempts, and SHA-256 hashes of the tokens used to read or delete it. We can't decrypt the ciphertext because we never receive the key or your password. The [security page](https://evergist.com/security/) documents the exact record. **Three counters.** We count page loads, notes created, and notes read, per day. They're integers with nothing attached: no IP, no device, no page path, no note ID. They're public on the [stats page](https://evergist.com/stats/). That's everything. ## What we don't store - IP addresses - Browser, device, or operating system details - Cookies or any other identifiers. The site sets no cookies - Referrers or the pages you visit - Request logs. Logging is switched off for our Worker ## How long we keep notes Until the expiry you chose (30 days at most), or until the last allowed view, whichever comes first. Then the note is deleted permanently. We don't keep backups of notes. ## Our hosting provider Evergist runs on [Cloudflare](https://www.cloudflare.com/). Cloudflare processes your IP address to deliver traffic and protect the service from attacks, as any network provider does. We use that IP only as a short-lived, in-memory key for rate limiting. The per-minute limit forgets it after 60 seconds. The hourly limit on creating notes keeps a salted hash of it in memory for up to two hours. Neither is ever written to disk. Cloudflare's own handling of network data is covered by [its privacy policy](https://www.cloudflare.com/privacypolicy/). Cloudflare never receives your note's key, your password, or your plaintext. We use no other third parties. No analytics providers, no ad networks, no fonts or scripts from other domains. ## Requests from authorities If we receive a valid legal request, the most we could hand over is what we store: ciphertext and the metadata listed above. We can't decrypt notes and we have no information linking a note to a person. ## Your rights Because we don't hold personal data linked to you, there's usually nothing for us to access, correct, or export. You can delete any note early with its link or its delete token. If you have questions about your data, email us. ## Changes If this policy changes, we'll update this page and the date at the top. We won't start collecting personal data without saying so prominently here first. ## Contact [contact@evergist.com](mailto:contact@evergist.com)