Good to see you.
Your private space, organized in one place.
Quick note
Capture a thought without leaving your dashboard.
Privacy reminder
New notes are encrypted in this browser before upload once Vault Encryption is set up. If older notes remain unmigrated, their original content is still readable in the database until migration finishes. Keep your Vault Passphrase safe: Supabase password recovery cannot recover it.
My notes
Create, search, edit, pin and remove your personal notes.
Create a note
Saved notes
0 notesAppearance
Make the vault feel like your own. These preferences are saved in this browser.
Theme
Choose a light or dark interface.
Change the main interface colour.
Increase this if text is hard to read over your wallpaper. No text background bars are added.
Custom background
Upload a JPG, PNG, WebP or GIF image. It stays in this browser only; it is not uploaded to Supabase. Very large images may exceed browser storage limits.
Blur the wallpaper itself.
Adjust the glass blur behind panels and the sidebar. Set to 0 for sharp panels.
Lower opacity lets the wallpaper show through the note editor and saved notes. Higher opacity makes note panels easier to read.
Security & privacy
Manage your session and account recovery options.
Session protection
Signs out after 2 minutes without activity.
Signs out if this tab stays hidden for 10 seconds. Maximum 45 seconds for safety.
The short limit helps protect your vault when you leave the tab. Closing tabs is best-effort because browsers may terminate without a final event.
Return to the login screen immediately.
Vault Passphrase
Forgot or want to replace your Vault Passphrase? Unlock the vault first, either with your current passphrase or with your saved recovery questions. This option safely re-encrypts your existing notes under the new passphrase.
Safety: before any database changes, the app creates an encrypted backup protected by the new passphrase. Download and save that backup, then confirm before the reset commits. If recovery questions are configured, enter all 3 answers again so recovery keeps working.
Vault recovery questions
Choose exactly 3 different questions and create private answers. These are for recovering access to your encrypted vault if you forget the Vault Passphrase. The answers are not stored as plain text; they are used to encrypt a recovery copy of the vault key.
Security tip: answers to ordinary security questions can be guessed. Use unique, long private phrases (12+ characters recommended), not easy-to-find factual answers. Anyone with a database copy could attempt guesses offline.
Change password
Enter a new password for your currently authenticated account. Supabase may require recent authentication.
Recovery email
Forgot your password? Supabase sends a recovery link to the registered email.
Manage devices
Control whether this browser can use a locally saved Vault key for faster unlocking.
This browser
Checking this browser's local key storage.
For privacy, the Remember this device key is stored in this browser profile and is not a cloud device registry. This menu can forget this browser only; it cannot remotely erase keys stored in your other devices or browsers.
Account settings
Review your signed-in account and manage account-related requests.
Profile
â
â
Request account deletion
This sends a deletion request for review; it does not immediately delete your account or notes. A trusted backend/admin process must verify the request and carry out deletion.
Requires the `account_deletion_requests` table and RLS policy described in the accompanying setup file. Until configured, the request will show a clear error rather than pretending it was submitted.
Backup & data
Backups are encrypted with your Vault Passphrase. Imported notes are encrypted again using the currently unlocked vault key.
End-to-end encryption
Check the vault encryption status after unlocking.
Note content is encrypted in this browser with AES-256-GCM before it is sent to Supabase. Your Vault Passphrase is never sent to Supabase or saved in browser storage. Keep it safe: if you forget it, the encrypted backup cannot be decrypted either.
Import backup
Encrypted Hiro Vault backups are recommended. Older version-1 JSON backups are plaintext; if imported, their contents will be encrypted before being uploaded, but the source file remains plaintext.
Local preferences
Theme and background preferences are stored in this browser and are not included in note backups. Removing browser data may clear them.