Legal notice and privacy

Publisher

Heddo is published by a private individual, on a non-commercial basis. In accordance with article 6, III, 2 of French law no. 2004-575 of 21 June 2004 on confidence in the digital economy, their contact details have been provided to the host.

Contact: contact@heddo.app

Host

Personal data

Without an account, Heddo collects no personal data. There is no analytics and no advertising. Your notes are stored only in your browser’s storage (IndexedDB), on your device: they are never sent to the publisher or to anyone else.

You can export them at any time from the app’s “Data” panel, and delete them by clearing this site’s data in your browser.

Sync account

Sync is optional. If you create an account, the following is stored on the service’s servers, hosted by Cloudflare:

• the username you chose (no e-mail address, no real name);
• a random salt, your master key wrapped by a key derived from your passphrase, and a SHA-256 hash of a derived login key. Your passphrase itself is never sent;
• your notes, encrypted in your browser (AES-256-GCM) before they are sent: their text, tags, people and dates cannot be read by the publisher or the host;
• in clear: the structure of your outline (which note sits under which), the revision and date of each change, and the size of each encrypted note, which are needed to sync;
• failed sign-in attempts, with a truncated hash of the IP address they came from, kept for one hour to limit password guessing.

This data is processed only to provide sync to you, and is kept until you delete your account. Deleted notes are purged 90 days after deletion. A sign-in session lasts 90 days from its last use; changing your passphrase or deleting your account ends all sessions. Deleting your account, from the “Data” panel, erases everything stored for it immediately. Notes on your devices are not affected.

The publisher cannot recover a lost passphrase or decrypt your notes. To exercise your rights (access, erasure) or ask a question, write to contact@heddo.app.

As with any website, the host processes technical connection data (IP address, browser) to deliver pages and protect the service. See Cloudflare’s privacy policy.

Cookies

Heddo sets no cookies. The app uses the browser’s local storage only to work: your notes, the layout of your panes, the fact that you have opened the app before and, with an account, your session.

Intellectual property

The Red Hat fonts are distributed under the SIL Open Font License 1.1. Your notes belong to you.

Last updated: October 12, 2026.