Zero Logs. Zero Tracking. Zero Compromise.

1. Information We Collect

Cabin is built on a strict zero-data-collection philosophy. We do not collect:

• Your name, email address, or any personal identifiers
• IP addresses or device fingerprints
• Browser cookies or tracking pixels
• Usage analytics or behavioral data
• The content of your notes (notes are encrypted before storage)

The only data stored is the encrypted ciphertext of your note, a randomly generated URL slug, and an expiry timestamp. None of this can be linked to your identity.

2. How Your Notes Are Stored

Every note created on Cabin is encrypted using AES-256 — the same standard used by governments and financial institutions worldwide.

• Encryption at rest: Notes are stored in encrypted form in our database.
• No decryption logs: We do not log when or how many times a note is viewed.
• Auto-deletion: Notes are permanently and irreversibly deleted after their set expiry time or after they are viewed (if "Burn After Read" is enabled).

3. Cookies

Cabin uses no third-party cookies and no tracking scripts. A single, temporary session cookie may be used strictly for CSRF (Cross-Site Request Forgery) protection — a security measure. This cookie:

• Contains no personal information
• Is never shared with any third party
• Expires when your browser session ends

4. Third-Party Services

Cabin does not integrate any third-party analytics, advertising, or social tracking tools (e.g. Google Analytics, Facebook Pixel, Hotjar). Our infrastructure runs on Vercel and TiDB Cloud. Their own privacy policies apply to infrastructure-level logging. We do not share any user data with these providers beyond what is technically necessary to serve the application.

5. Data Retention

Notes are deleted automatically based on the expiry window chosen at creation (5 minutes, 1 hour, 24 hours, 7 days, or 30 days). After deletion:

• The encrypted content is permanently removed from our database.
• The process is irreversible — we cannot recover deleted notes.
• No backups of note content are maintained.

6. Children's Privacy

Cabin is not directed to children under the age of 13. We do not knowingly collect any information from children. If you believe a child has used the platform in violation of this policy, please contact us and we will take appropriate action.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date. Continued use of Cabin after changes constitutes acceptance of the revised policy.

8. Contact

If you have any privacy concerns or questions, please reach out to us: