NockNotes

Privacy Policy

Stand: July 2026

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Fabian Unger
Im Kirchenbenden 26
53129 Bonn
Germany
Email: contact@nocknotes.com

2. Overview

NockNotes is a note-taking application available as a browser extension (currently Google Chrome) and as a web app. We only process the data required to operate the service. There is no advertising tracking and your notes are never shared with third parties for advertising purposes.

3. What data we process

  • Account data: your email address and a (securely stored) password for signing in.
  • Note content: the notes you create, their metadata (created/modified timestamps, archive status) and your app settings (e.g. language, display).
  • Technical data: when accessing our servers, technically necessary data such as IP address, timestamp and device/browser information is processed (server logs).
  • Support communications: if you contact us (e.g. by email), we process the information you provide in order to handle your request.
  • Optional Pipedrive data: only if you enable the Pipedrive integration and store an API key.

4. Purposes and legal bases

We process your data to provide the service (registration, sign-in, storage and synchronization of your notes). The legal basis is the performance of the usage agreement (Art. 6(1)(b) GDPR). To ensure security and operation we rely on our legitimate interest (Art. 6(1)(f) GDPR). Where we ask for your consent (e.g. for optional usage statistics), the legal basis is Art. 6(1)(a) GDPR.

5. Hosting and processors

To provide the service we rely on a third-party cloud infrastructure provider that handles hosting, database storage, user authentication and server-side functions on our behalf. This provider acts as a processor under a data processing agreement (Art. 28 GDPR).

Your notes, their metadata and settings, as well as our server-side functions, are hosted in the European Union (data center in Frankfurt, Germany).

Account and sign-in data (e.g. your email address and authentication tokens) is handled by the provider's authentication service, which may process data outside the EU, including in the USA. For such transfers, appropriate safeguards apply (EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework).

We are happy to name the specific processor on request at contact@nocknotes.com.

6. Cookies and local storage

For sign-in and offline use we store technically necessary data on your device – for example authentication tokens, a local cache of your notes and your settings – using browser storage (such as cookies, LocalStorage and IndexedDB). This data stays on your device and is not used for advertising or cross-site tracking.

7. Analytics

The browser extension uses no analytics. In the web app we do not use advertising trackers. If we use privacy-friendly, aggregated usage statistics, we obtain your consent beforehand where required and you can withdraw it at any time with effect for the future.

8. Browser extension permissions

The extension replaces the "new tab" page to show your notes instantly. It does not read the content of other websites and only transmits the data required for the notes feature to our servers.

9. Optional Pipedrive integration

If you enable the integration, the note content is transmitted to Pipedrive when you push a note. This is an independent third-party service; its privacy policy applies additionally. Without active use, no transmission takes place.

10. Retention and deletion

We store your data for as long as your account exists. You can delete your account at any time in the settings, which removes your account and your notes. You can export all notes before deletion.

11. Your rights

Under the GDPR you have the following rights:

  • Access (Art. 15), rectification (Art. 16) and erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Objection to processing (Art. 21)
  • Withdrawal of consent given (Art. 7(3))

You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, an email to contact@nocknotes.com is sufficient.

12. Data security

Data is encrypted in transit (TLS/HTTPS) and encrypted at rest by our hosting provider. Access to your notes is tied to your account and protected by access rules.

13. Age limitation

Our Services are not directed to children. You must be at least 16 years old to use NockNotes. If we learn that we have collected personal data from a person under 16 without the required consent, we will delete it.

14. Changes to this policy

We update this privacy policy when the service or the legal situation changes. The version published on this page applies.