Security & privacy
Authentication, sessions, and how your data is stored.
Authentication
Snownotes supports traditional email and password sign-in, as well as OAuth via GitHub and Google. When using OAuth, authentication is handled entirely by the provider — no password is stored on the Snownotes server. You can sign up with whichever method you prefer.
Sessions
Your session is managed with a secure, HTTP-only cookie that cannot be accessed by client-side JavaScript. Sessions expire automatically after a period of inactivity to protect your account. When a session expires, you are redirected to the login page.
Your data
Notes are stored securely on the server and are accessible only when you are authenticated with your account credentials. Shared notes are visible only to the specific collaborators you invite by email — no one else can access them.