Encrypted before it's stored
Your content is encrypted with AES-256 before it reaches the database, with the key kept separate from it. A copy of the database shows nothing readable.
A diary, a to-do list and your notes are personal. This page explains, in plain language, how RytePad protects them and what stays in your control.
Your diary entries, tasks, goals, checklist items and notes are encrypted with AES-256 before they are stored, every connection uses HTTPS, passwords are stored as bcrypt hashes, and there is no admin screen that can show your content. RytePad has no ads and does not sell or rent personal data.
The same protection on the free plan and on Pro.
Your content is encrypted with AES-256 before it reaches the database, with the key kept separate from it. A copy of the database shows nothing readable.
Every page and request travels over an encrypted connection, and sign-in cookies are marked secure and hidden from page scripts.
Passwords are stored as bcrypt hashes. Changing yours signs out every other session, and Log out everywhere does the same in one click.
Repeated wrong sign-ins for one account or from one network are slowed down, and new sign-ups pass a bot check.
Reset codes have six digits, last ten minutes and lock after five wrong tries. The reset page never reveals whether an address has an account.
There is no admin screen that can display your content. Administrators see only the usage statistics and logs needed to run the service.
Pro is paid through Paddle, which acts as the merchant of record: it takes the payment, handles tax and issues your receipt.
RytePad never sees your full card details.
RytePad is paid for by Pro subscriptions. Personal data is never sold or rented.
Data is shared only with the providers needed to run the service: hosting and email delivery, payments, affiliate payouts and analytics. The privacy policy lists them.
No. Your content is encrypted on our server before it is stored, and decrypted only to show it to you when you're signed in. That keeps it unreadable in the database. End-to-end encryption, where only your own device holds the key, is a different model that RytePad doesn't use today.
There is no admin screen that shows your content, and the content in the database is encrypted. Administrators can see usage statistics and logs needed to run and fix the service.
Your profile and all of your content are deleted at once. Billing records are kept as tax and accounting law requires, and operational records such as sign-in logs are trimmed automatically within a year.
No. There are no ads, and personal data is never sold or rented. RytePad is paid for by Pro subscriptions.
The privacy policy covers what is collected, why and for how long; the terms of service cover your account and the plans.
Found a security problem? Write to support@rytepad.com with the details, and a person will reply.
The same protection on every plan. No card needed.