Privacy Policy
Last Updated: November 2026
1. Zero-Log Architecture
NotePress was founded on the fundamental principle that private conversations belong exclusively to the communicating parties. We do not track user activities, sell user profiles, or embed advertising trackers.
2. Cryptographic Tokens & Authentication
Authentication utilizes server-signed HMAC-SHA256 tokens bound directly to authorized phone numbers. Access tokens expire automatically and are refreshed dynamically through encrypted HTTPS and WSS protocols.
3. Real-Time Media & WebRTC
Audio and video calls are established directly between peers via WebRTC using DTLS-SRTP encryption. Call data does not traverse unencrypted intermediate storage nodes.
4. Vanish Mode Data Wiping
Messages exchanged in Vanish Mode are automatically expunged from device memory and the PostgreSQL database once viewed, leaving zero forensic trace.