Security

Last updated: September 5, 2026

EnoteSpace is designed as a local-first desktop application. Notes are created, edited, and stored on your device. EnoteSpace does not operate a cloud service that stores or synchronizes your notes, so your notes are not stored in an EnoteSpace-hosted database.

This page describes the security model of the application and this website. It does not guarantee that your device, operating system, backups, or other software cannot be compromised.

Local storage and encryption

  • Notes and related files are stored locally on the device where you use EnoteSpace.
  • EnoteSpace stores application data in encrypted form locally.
  • On Snap installations, connecting password-manager-service allows EnoteSpace to use the host system keyring to protect encryption keys. We recommend enabling this connection when available.

Data locations for AppImage and Snap installations are described in the Installation guide.

What stays under your control

EnoteSpace does not synchronize your notes with our servers. As a result:

  • we do not have access to your notes through an EnoteSpace cloud service;
  • we cannot reset, recover, or remotely delete your local notes;
  • access to your notes depends on the security of your device and operating system.

Protect your device, operating system account, and any backups you create. If you uninstall the Snap package without making a backup, notes and other files stored in the Snap data directories may be removed.

Network use

EnoteSpace is designed to work without an internet connection.

Using the website, downloading an application release, or following links to third-party services such as GitHub requires a network connection and is subject to the policies and security practices of those services.

This website

This website is static. It does not host user accounts or note data, and we do not run analytics or advertising scripts on the site.

Download EnoteSpace only from official GitHub Releases or the Snap Store. Do not install unofficial or modified builds.

For Snap installations, do not install EnoteSpace with the --classic option. Classic confinement grants the application broader access to the system than the intended confined installation.

Reporting a vulnerability

If you believe you have found a security vulnerability in EnoteSpace or this website, please report it privately through GitHub Security Advisories rather than opening a public issue.

Please provide enough information for us to reproduce and investigate the issue. Where possible, give us a reasonable opportunity to address the issue before publicly disclosing it.

Changes

We may update this page as the application or website changes. The “Last updated” date at the top of this page will be updated when changes are made.