Privacy Policy

Last updated: September 2026

At Parchemin (operated by The Quiet Bot EI), our belief is simple: the best way to protect your privacy is to never collect your personal data.

We do not track you, we do not show ads, and our zero-knowledge architecture makes it technically impossible for our teams or servers to read your encrypted notes.

1. Summary (Short Version)

• No ads: We do not show advertisements, work with ad networks, or sell data.
• No third-party trackers: We do not use Google Analytics, social media pixels, or cross-site tracking scripts.
• Zero-knowledge encryption: Your notes are encrypted in your browser before reaching our infrastructure. We never access your decryption keys or plaintext messages.
• Ephemeral data: Expired or read notes are immediately and permanently destroyed from our database.
• Hosted in France / EU: All data is processed within the European Union, in full compliance with the General Data Protection Regulation (GDPR).

2. Data We Process

A. Encrypted Note Content

When you create a note:

• Plaintext is encrypted directly on your device using OpenPGP before it is sent.
• We receive and temporarily store only the encrypted payload (ciphertext), together with technical metadata essential to service operation (expiration date, read limit, and self-destruction indicator).
• We have no access to the decryption key, which exists exclusively in the link fragment (#) on the client side.

B. Temporary Technical Logs

To prevent denial-of-service (DDoS) attacks, brute-force attempts, and infrastructure anomalies, our servers may temporarily record minimal technical logs (standard HTTP headers and IP addresses). These logs:

• Are retained solely for security and rate-limiting purposes.
• Are never correlated or associated with note contents or user identities.
• Are automatically purged and deleted after a short operating period.

C. Account and Team Data

For subscribed customers:

• We retain the minimum information required for authentication (professional email address and company policy preferences).
• Content created by members remains end-to-end encrypted with zero-knowledge keys.

3. Cookies and Local Storage

• Anonymous users: We set no tracking cookies, advertising cookies, or persistent profiling identifiers.
• Registered users: We use only session cookies strictly necessary for secure authentication and protection against CSRF attacks.

4. Data Retention and Deletion

• Burn after reading: When enabled, the encrypted note is immediately and irrevocably deleted from our database as soon as the recipient views it.
• Time-based expiration: Notes that expire without being read are automatically purged by background cleanup jobs.
• Irreversibility: Once deleted, no note can be restored, including by Parchemin administrators.

5. Sharing with Third Parties

We never sell, rent, market, or disclose your data to third parties. We use no external behavioral analytics or advertising providers.

In the event of a lawful, binding judicial order issued by competent authorities:

• We could provide only data in our possession: indecipherable encrypted text without a key, or confirmation that the data has already been permanently destroyed.

6. Data Controller and Contact

The Parchemin service is operated by:

The Quiet Bot EI
9 rue Desiree
69001 Lyon, France SIREN 499739951

For any question about this privacy policy or our security practices, email us at contact@parchemin.app.