Privacy Policy

Last updated 3 June 2026

Who we are

This site and the classified tool (classified.mainly.art) are operated by MAIN OÜ, an Estonian private limited company (registry code 11272196), registered at Soosepa tee 46-2, Pärnamäe küla, Viimsi vald, Harju maakond, 74020, Estonia. For privacy questions, contact us via the address revealed on our home page.

Zero-knowledge by design

classified is built so that we cannot read your notes:

• Your note is encrypted in your browser before anything is uploaded. The server only ever receives an encrypted blob and an opaque identifier.
• The decryption key never reaches our server. It lives in the share link's URL fragment (the part after #), which by web standards is never sent in HTTP requests — or, in password mode, it is derived from your password inside your browser.
• Notes are ephemeral: destroyed on first view and automatically purged at the expiry you set (5 minutes to 24 hours).
• There is no content logging — there is nothing readable for us to log.

Technical data we process

Like any website, requests carry standard metadata such as IP address, timestamp, and user-agent. This is handled transiently at the Cloudflare edge to serve the site and protect it from abuse. We do not use it to build profiles, and we do not link it to note contents (which we cannot read).

Cookies and advertising

The classified app is ad-supported. Ads are served by Google AdSense, which may set and read third-party cookies or similar identifiers to deliver and measure ads. For visitors in the EU, UK, and Switzerland we show a Google-certified consent banner (CMP) so you can grant or refuse ad-related cookies; where consent is not given, ads are limited to non-personalized serving. You can review and adjust your choices at any time, and learn more from Google's "How Google uses information from sites or apps that use our services" and your Google Ads Settings. The corporate home page at mainly.art itself shows no ads.

Third parties

• Google — AdSense advertising and the certified consent management platform on classified.mainly.art.
• Cloudflare — hosting, CDN, encrypted-blob storage (Cloudflare KV), and the Turnstile widget used to protect the contact-email reveal on our home page.

Data retention

Notes are ephemeral: deleted on first view and otherwise auto-expired within 5 minutes to 24 hours. We keep no long-term store of note content. Transient edge request logs are retained only briefly for security and abuse-prevention.

Your rights

Under the EU General Data Protection Regulation and Estonian law you may request access to, correction of, or erasure of personal data we hold, and you may lodge a complaint with a supervisory authority (in Estonia, the Data Protection Inspectorate / Andmekaitse Inspektsioon). In practice, the notes service holds nothing that identifies you. To exercise any right, contact us via our home page.

Changes

We may update this policy as the service evolves; the "last updated" date above reflects the current version.