your Burn Notes, your personally identifiable information, and
information about your usage of Burn Note are collected, protected and
used. It may be updated by us from time to time.
This Policy applies to https://burnnote.com, including the web sites, features, applications, online services and functionality available via https://burnnote.com that post a link to this Policy, whether accessed via computer, mobile device or otherwise (collectively, the "Site"), and explains how Burn Note collects, uses, and shares information from or about you when you visit our Site or use Burn Note.
This Site is owned or controlled by Burn Note and Burn Note is the commercial operator of this Site, although software, hosting and other functions and content may be provided by Burn Note's service providers ("Service Providers") or other companies affiliated with Burn Note or merely in a business relationship with Burn Note.
PLEASE CAREFULLY READ THIS POLICY BEFORE USING THE SITE, AS IT AFFECTS YOUR LEGAL RIGHTS AND OBLIGATIONS.
While many other sites keep your data for as long as possible, it is
Burn Note's policy to expunge your data as soon as possible after it
has served its purpose. For more about how Burn Note
works, click here. Furthermore,
Burn Note does not share personally identifiable information with any
third party vendors for analytics or advertising purposes. Burn Note
may share or release certain information to third parties under
certain circumstances - we explain that below.
Information Collection and Use
Contents of Burn Notes
When you create a message on our service the message contents are
encrypted before they are stored in our database. The encryption key
is retained on our servers to decrypt your note when it is read. A
unique encryption key is created for each conversation. If
you want to provide additional protection for your Burn Notes, you can
add your own password to the message. You will have to send the
password separately to the recipient of your message.
It is our policy to respect your privacy to the utmost, hence we will never access the contents of your messages ourselves or share or release them to a third party except under circumstances as described in the section below titled "Circumstances in which we may release information".
Messages are stored until first view and then deleted. Unread messages are deleted after 30 days. Deleted messages are completely expunged from our servers. Burn Note is not designed or meant for use by anyone who has a legal obligation to preserve information or documents. If you have a legal obligation to preserve data, do not use Burn Note.
In order to ensure that message contents are completely deleted we do not maintain backup copies of the messages database. This means that Burn Notes may be lost in the event of an outage. Database deletes are preceded by updates which overwrite the encrypted note contents with zeroes to avoid leaving partial note contents behind on disk. You can find more detailed information about how Burn Note works on our technical page.
Your personally identifiable information
When you sign up for a Burn Note account or update the details of your
existing account we store the information you submit, such as email
address and username. We do not share or release this information to
any third party except under the circumstances as described in the
section below titled "Circumstances in which we may release
Unlike the contents of Burn Notes, we maintain backups of your account information. Account backups are retained for up to 30 days.
Your usage of Burn Note
While we do not share your personally identifying information with third parties other than as described in this Policy, we may share total usage statistics from our internal analytics system. Our analytics systems do not record information related to the contents of Burn Notes or information that would identify both the sender and recipient of a Burn Note.
When a Burn Note is sent or opened, our internal analytics system records the following anonymized information:
- Whether a note was sent or opened.
- The current time rounded to the nearest hour.
- The age of the user's account in weeks.
- Whether the note was sent through email, on Burn Note, or via url.
In addition to the above, our internal analytics system creates a weekly total count of messages sent and conversations created by your account. These weekly account totals expire 7 days after your first activity and are not retained after that time. They are used to calculate system-wide aggregates which are fully anonymized.
Our analytics system may also record whether or not you logged in to your account in any particular 24 hour period. This information is used to measure monthly active unique users.
Standard system logging
In addition to our internal analytics systems, our web logs collect standard web log entries for each page served, including page URL, and timestamp. Web logs help us to diagnose problems with our service, to administer and improve the service, and to otherwise provide our service to you. We do not record your IP address in our weblogs however we may use your IP address in other parts of our service for example, to prevent spam. These records are deleted after 30 days.
Circumstances in which we may share or release information
We may disclose information about our users: if we are required to do so by law or legal process such as responding to subpoenas or court orders; or to law enforcement officers or others where such disclosure is reasonably necessary or appropriate to: enforce our Terms of Service, respond to claims that any message's contents violate the rights of third-parties, protect the rights, property, or personal safety of our service, its users or the general public, or prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.
When you provide information to us through our Site, we may share your information with Service Providers we have retained to perform services on our behalf. These Service Providers are not authorized by us to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements.
We reserve the right to transfer any information we have about you in the event that all or part of Burn Note or all or part of its assets are acquired by, merged with, sold to, or otherwise disposed of to one or more third parties (including, without limitation, in the event of bankruptcy).
Your California Privacy Rights (as provided by California Civil Code Section 1798.83)
When California customers provide personal information to Burn Note, they have the right to request certain disclosures if Burn Note shares personal information with affiliates or third parties for the affiliates' or third parties' direct marketing purposes. At this time, Burn Note does not share any personal information with affiliates or third parties for those affiliates' or third parties' own direct marketing purposes.
Once per calendar year you may request that we provide a list of companies with which we share personal information for the affiliates' and/or third parties' direct marketing purposes, if any, and a list of the categories of personal information that we share, if any. California customers may request further information about our compliance with this law by e-mailing firstname.lastname@example.org. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this e-mail address.
We and our Service Providers have implemented and maintain physical, electronic, and procedural safeguards designed to protect against loss or unauthorized access, disclosure, alteration or destruction of the information you provide on our Site. However, no data transmission over the Internet, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. Please note that we cannot ensure or warrant the security of any information we collect, and you use our Site and Service, and provide us with your information, at your own risk.
You are responsible for maintaining the confidentiality of your account username and password. We recommend that you choose a unique password for your Site account and that you do not use any password that you also use for any other accounts which may contain your sensitive information, such as financial accounts or e-mail accounts. You agree to immediately notify Burn Note of any unauthorized use of your password or account or any other breach of security. We will not be responsible or liable for any loss or damage arising from your failure to comply with this provision.
Third Party Websites
There may be hyperlinks on the Site to other websites or locations that are operated and controlled by third parties ("Third Party Websites"). These Third Party Websites may use their own cookies, web beacons and other technology to independently collect information about you. In addition, these Third Party Websites may solicit personal information from you. We make no representations regarding the policies or business practices of such Third Party Websites and encourage you to familiarize yourself with their privacy policies before providing them with your personal information.
Consent to Transfer Information
The Site and Burn Note service are operated in the United States. If you are located in the European Union, Canada or elsewhere outside of the United States, and are accessing the Site or the Burn Note service, please be aware that information we collect, including personal information, will be transferred to, processed and stored in the United States and, as such, courts and other authorities in the United States may, in certain circumstances, be entitled to access your personal information. By using the Site or Burn Note service or providing us with any information through the Site or Burn Note service, you consent to this transfer, processing and storage of your information in the United States.
Protecting Children's Privacy Online
We feel strongly about protecting the privacy of children. As such, we do not knowingly collect personally identifiable information from children under 13 without parental consent. This Site is not directed to or intended for individuals under 13 years of age. If you are under the age of 13, please do not provide personally identifiable information of any kind whatsoever.
Changes to this Policy