At Black & Tan Notes, we take your privacy seriously. This policy outlines what information we collect, how we use it, and how long we retain it. Black & Tan Notes is operated by Derivative Works LLC.
Account Information:
When you create an account, we collect your email address and optional display name. We use your email to send login codes (one-time passwords).
Scanned Page Images:
When you scan or upload notebook pages, we store the full-resolution images and smaller thumbnail versions in our database. These images are associated with your account and organized into journals. Scanned pages may contain handwritten text or other personal content.
Notes:
You can add text notes to any scanned page. These notes are stored in our database and are searchable within your account.
Journal Metadata:
We store journal names and creation dates that you provide when organizing your scanned pages.
Shared Pages:
When you share a page, we generate a unique link token. Anyone with this link can view that specific page and its image. We do not log who views shared pages.
Analytics:
On the landing page, we collect basic analytics including: hashed IP address, approximate location (city, country, and state derived from a local geolocation database — your IP is not sent to any third party for this purpose), device type, browser, screen dimensions, and page load performance metrics. Full IP addresses are deleted within 24 hours; hashed IPs are retained for aggregate analytics.
Security & Bot Detection:
On the login page, we collect interaction signals (such as mouse movement counts and touch events) to distinguish real users from automated bots. This data is used solely for abuse prevention.
Cookies:
We use a single authentication cookie (auth_token) to keep you signed in. It expires after 30 days. We do not use advertising or third-party tracking cookies.
We do not sell or rent your personal information. We share data with third parties only as necessary to operate the service:
Your scanned images and notes are not shared with any third party. Image processing (page detection and rectification) is performed on our own servers.
You can delete individual journals (and all their pages) from within the app. To request full account deletion or a copy of your data, contact us at support@blackandtannotes.com. We will respond within 30 days.
If you have any questions about this privacy policy or our data practices, please reach out to us at support@blackandtannotes.com.
Last updated: February 2026