How we look after your notes

Where your notes live

• During the beta, LuniNote runs on a server we operate ourselves in Slovakia, in the EU.
• Attachments, import files and exports are stored with Cloudflare R2, in the EU.
• Backups are kept with Cloudflare R2 too, in the EU, in storage of their own with its own key.
• Every connection to LuniNote is encrypted (HTTPS), and the sign-in cookie is only ever sent that way.

The privacy policy lists every company that helps us run the service, and why.

Backups

Changes to the database are copied out as they happen, at most a minute behind, and a full copy is made every night. Both are encrypted on our server before they leave it. We've tested bringing the database back from them.

Still being set up: backups of your attachments, and a restore test every month. Until both are in place, we suggest keeping an export of your own as well.

Files are read in isolation

To make the words in your PDFs, documents and scans searchable, LuniNote opens each file in a separate, locked-down process: it has no network access, can't change anything on the disk, and runs under a user of its own, so a file made to cause harm can't reach anything outside it. The reading happens on our own server; no outside service sees your files.

Signing in

• Your password is stored scrambled with Argon2id, a method made to be slow to crack. We never store the password itself.
• Sign-in and sign-up attempts are limited, so a password can't be guessed by trying again and again.
• Sign-ins are kept for 60 days after you last use them, and stored in a form that can't be used to sign in.
• We email you when your account is signed in to from a browser or network it hasn't used in 90 days.

What we can see

LuniNote doesn't use end-to-end encryption. Our server can read your notes: that's how it searches inside them and inside your files. Nobody at LuniNote reads your notes unless you ask us to help with a specific problem, or the law requires it. We don't sell your data, show ads, or use your notes to train AI.

The app and this website have no advertising, analytics or tracking scripts. The app uses one cookie, to keep you signed in.

The move from Evernote

The LuniNote extension uses the Evernote session you're already signed in with. We never see your Evernote password, and the session stays in your browser; it isn't sent to us. The move only reads from your Evernote account and never changes or deletes anything there.

Not built yet

• Two-step sign-in and passkeys.
• End-to-end encryption.
• Backups of attachments, and the monthly restore test (above).

Taking it with you

Export your whole account from Settings at any time, as .enex files, web pages, Markdown or a complete archive, and delete your account there too. Deleting removes everything in it from our database and file storage at once.

Found a problem?

If you find a security problem, write to support@luninote.com and tell us what you saw. Please don't test it further, and don't look at anyone else's notes.