Security & privacy
Authentication, sessions, and how your data is stored.
Authentication
Snownotes supports traditional email and password sign-in, as well as OAuth via GitHub and Google. When using OAuth, authentication is handled entirely by the provider — no password is stored on the Snownotes server. You can sign up with whichever method you prefer.
Sessions
Your session is managed with a secure, HTTP-only cookie that cannot be accessed by client-side JavaScript. Sessions expire automatically after a period of inactivity to protect your account. When a session expires, you are redirected to the login page.
Your data
Notes are stored securely on the server and are accessible only when you are authenticated with your account credentials. A note is visible only to the specific collaborators you invite by email — no one else can access them.