Privacy Policy

At ReaDelete (https://readelete.com), privacy is enforced through mathematics and volatile memory architecture rather than mere policy promises. This Privacy Policy explains what data is processed, how Zero-Knowledge encryption protects your payloads, and how advertising cookies operate on our public pages.

1. Zero-Knowledge Processing of Secret Notes & Attachments

When you create an encrypted note or watermarked image on ReaDelete:

• Client-Side Encryption Only: Your plaintext text, passwords, and attached images are encrypted locally inside your browser using 256-bit AES-GCM before transmission.
• No Key Custody: The 256-bit cryptographic key is stored exclusively inside the URL fragment identifier (after the # symbol) and is never sent to ReaDelete's servers.
• Volatile RAM Storage Only: The encrypted ciphertext and initialization vector (IV) are held strictly in volatile server memory (RAM). They are never written to a hard drive, SSD, or persistent database.
• Immediate Destruction: Upon the first confirmed read operation (POST /api/notes/:id/burn), manual sender revocation, or expiration of the selected TTL (between 1 hour and 7 days), the ciphertext is permanently deleted from RAM.

2. Server Logs & Anonymous Read Receipts

We do not log IP addresses, browser fingerprints, or user identities against note identifiers. Our in-memory read-receipt ledger stores only anonymous Unix timestamps (createdAt, expiresAt, and burnedAt) so the sender's browser can display real-time destruction confirmation.

3. Google AdSense & Third-Party Advertising Cookies

To keep ReaDelete 100% free for everyone without requiring accounts or subscriptions, our public informational pages display advertisements served by Google AdSense (Publisher ID: ca-pub-4503446657820475).

• Third-party vendors, including Google, use cookies (such as the DoubleClick DART cookie) to serve ads based on a user's prior visits to this website or other websites on the internet.
• Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to readelete.com and/or other sites on the Internet.
• Users may opt out of personalized advertising at any time by visiting Google Ads Settings or www.aboutads.info.
• For detailed information on how Google processes data when you use partner sites, please visit How Google uses information from sites or apps that use our services.

4. Strict Isolation of Secret Links (/n/*)

All one-time secret routes (/n/*) are disallowed in our robots.txt file and enforce strict noindex, nofollow meta rules. Furthermore, because the decryption key resides behind the # URL fragment, third-party scripts and network requests never receive the cryptographic key.

5. Your Rights Under GDPR (EEA/UK) and CCPA (California)

Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you have the right to access, rectify, erase, or restrict processing of personal data, as well as the right to withdraw cookie consent via our consent management banner. Because ReaDelete does not create user accounts or store personal profiles on disk, we hold no persistent personal databases of our users. For any privacy inquiries, contact our Data Protection Desk at privacy@readelete.com.