MemoDuePrivacy

In short

• No accounts, no sign-up, no cookies, no analytics or tracking.
• Your note is encrypted in your browser. The key is in the #k= part of the link, which is never sent to this site or written to Solana. We cannot read notes.
• The encrypted note and its details are public on Solana devnet forever, even after the note is closed. After a takedown, expiry or close, a note can no longer be unlocked, even with the full link (details).
• Our host and the services your browser talks to see your IP address. They are outside Australia.

What is stored on the public blockchain

• Only encrypted note content. Your browser encrypts the note before anything is sent. Solana stores the encrypted note plus the public details listed under Public on Solana, forever (such as wallet addresses and times). The note's plaintext and the key in the link (the part after #) are never sent to us or written on chain.
• It stays in history. The encrypted note and the transactions that created, read, closed or took down a note stay in Solana's public history after the note is closed or taken down. Closing only removes the note account and returns its Solana rent (minus a small permanent fee) to the creator. Nobody can delete that history, including us.
• Opening needs a second key part. Every note created now needs two key parts. One is in the link. The other is released by the time-locked access service only while the note is open: before its expiry, and never once it has been taken down or closed. The content also stays time-locked until its unlock time. Once a note is taken down, has expired or has been closed, that part is no longer released, so its encrypted content can no longer be unlocked, by anyone including us, even with the full link.
• Limits. Anyone who opened the note while it was open may have kept a copy of the text, and we cannot take that back. This protection depends on the time-locked access service and its on-chain rules working as designed. On devnet those rules can still be changed by a software upgrade [ALEX TO CONFIRM: upgrade authority for the access rules moved to a multisig or frozen before launch]. Older notes, created before every note needed the access service, have no second key part: anyone with their full link can still decrypt them from the public history.

Who we are

MemoDue is a test service on Solana devnet, run by [ALEX TO CONFIRM: legal name of the operator (company or individual) and ABN, if any]. "We" and "us" on this page mean that operator.

Privacy questions and requests: [ALEX TO CONFIRM: privacy contact address, for example security@memodue.com or a separate privacy@ address].

What we collect, and what we don't

• No accounts. There is no sign-up, login, name, email address or phone number on this site. The site has no forms and no server of its own that receives your data.
• No cookies, analytics or ads. The site sets no cookies and runs no analytics, tracking or advertising code. It loads no outside fonts or scripts: everything comes from this site.
• No note text or keys. Your browser encrypts the note before it leaves your device. The key stays in the #k= part of the link, which browsers do not send to any server. We cannot see what a note says, and we cannot recover a lost link.
• Browser storage. A few pages save a little data in your own browser (local storage). It stays on your device, is never sent to us, and you can clear it in your browser settings:
  • Due notes: whether you opened or closed each section of the list. No note data.
  • Read and Reclaim: the reads whose Solana rent your wallet can still claim back (the read's account address and amount, keyed by your wallet address), so a reload does not lose them. No note data or key.
  • Authority and Treasury: a cache of fee totals read from public Solana transactions, shared by both pages, so they do not fetch them again.
  • Authority and Compliance: the multisig address you entered for the fee or compliance authority's vault, so you do not have to paste it again.
  No other page stores anything. Your wallet extension may store its own data under its own terms.
• Sanctions check. Before you sign, this site checks your wallet address against a sanctions list that it downloads from this site. The check runs in your browser; your address is not sent to us.
• Emails you send us. If you email abuse@memodue.com or security@memodue.com, we receive your email address, your name if you include it, and what you write. The report page fills in the note address only, never the key. [ALEX TO CONFIRM: reports are used only to handle that report or issue.]
• Screenshots in reports. A report may include a screenshot or photo of the note, which shows the decrypted note. The takedown team receives it at abuse@memodue.com and uses it only to assess and act on the report. Please send no more than is needed to show the problem. A screenshot or photo is sent as is: it may contain metadata such as location. Crop it to hide the address bar, which can show the note's link key.

Who else sees data when you use MemoDue

Your browser talks to these services directly. Each one sees your IP address and browser details, and handles them under its own terms.

• Hosting and network service providers. We use overseas hosting and network service providers, located in the United States and other countries, to serve the website. They see each page request: your IP address, browser, time and the page address, including the part after ?. A read link has the note address there, so they can link your IP address to the note you open. The #k= key is not sent. We cannot see request logs for this site. They keep request logs for periods they set, not all of which are published, and we cannot change them.
• Solana devnet RPC (api.devnet.solana.com, a public Solana service), and a backup public devnet RPC service that your browser uses only when that one cannot be reached. Each sees your IP address, the accounts your browser looks up (such as the note address) and the transactions you send, including your wallet address.
• drand (api.drand.sh, a public randomness service). It sees your IP address and which time-lock round your browser asks for, which is close to the note's unlock time. It gets no note text or keys.
• A third-party decentralised access network releases part of the key for gated notes, between unlock and expiry. It works only through Solana: it sees the reader's wallet address and an encrypted key part, never the note text or the #k= key.
• Your wallet (for example Phantom) is your own choice. It sees every transaction you sign and is governed by its own privacy policy.
• Email to memodue.com addresses is handled by a third-party email hosting provider. [ALEX TO CONFIRM: name the email host here or keep it generic, and its location]
• Solana Explorer (explorer.solana.com) sees your IP address and the address or transaction in the link, only if you click an explorer link.

This site's security settings let your browser connect only to this site, api.devnet.solana.com, the backup devnet RPC service and api.drand.sh.

Public on Solana, forever

Everything written to Solana devnet is public and cannot be changed or deleted, by us or anyone else. For each note that includes:

• the encrypted note (ciphertext), its size, and its created, unlock and expiry times;
• the creator's wallet address, and the wallet address of anyone who reads a gated note;
• fees paid, and any takedown state set on the note.

Reading a note sends a transaction from the reader's wallet. That transaction pays the read fee to the treasury, and it is public on the blockchain, so anyone can see which wallet read which note and paid the fee.

Closing a note removes its account, but the transactions that created and read it stay in Solana's history. Anyone with the full link can decrypt a note while the link still works, so treat the link as a secret. A wallet address is not your name, but it can identify you if it is linked to you elsewhere.

Overseas disclosure

All of the services above are outside Australia. Using MemoDue means your IP address, wallet address and note metadata go to them:

• Hosting and network service providers: the United States and other countries. Pages are served from data centres around the world, usually the one nearest you, and request logs may be kept in the United States and Europe.
• Solana devnet RPC: [ALEX TO CONFIRM: operator and country].
• Solana network: validators and explorers worldwide.
• drand: [ALEX TO CONFIRM: operator and country].
• The access network: node operators in several countries [ALEX TO CONFIRM: countries].
• Email hosting provider: [ALEX TO CONFIRM: country].

[ALEX TO CONFIRM: full overseas recipients list, and the APP 8 wording after legal review]

How long data is kept

• Solana: forever. We cannot delete it.
• Hosting and network service providers: under their own policies. We are shown no request logs for this site, and not every provider publishes how long it keeps them.
• Solana RPC, drand, the access network and your wallet: under their own policies.
• Emails to abuse@ and security@: [ALEX TO CONFIRM: how long report and security emails are kept].
• Screenshots and photos sent with a report: only as long as needed to assess and act on the report and to meet legal obligations. [ALEX TO CONFIRM: exact retention period for report screenshots and photos].
• Browser storage: until you clear it.
• We keep no other database about visitors or notes.

Takedowns and the block list

• On-chain takedown. After a report or a legal notice, we can set a takedown on a note. This is a Solana transaction, so it is public: it records the note's state and a SHA-256 hash of the reason, not the reason itself.
• Block list. blocked-notes.json is a public list of note addresses this site will not show, with a reason category and a reference. [ALEX TO CONFIRM: names and contact details are never put in it.]
• Notices from regulators, including the eSafety Commissioner: [ALEX TO CONFIRM: how eSafety and other notices are received, recorded and kept].

See the Terms for what we can and cannot block.

Access and correction

You can ask what personal information we hold about you and ask us to correct it. In practice that is only emails you sent us. We cannot read notes, recover or replace a lost link, or change or delete anything on Solana. Requests: [ALEX TO CONFIRM: privacy contact]. Complaints: [ALEX TO CONFIRM: complaints process, and whether to refer people to the OAIC].

Security contact

Report a security issue to security@memodue.com (see security.txt). Never send a note's #k= key.

Changes

We will post any change on this page with a new date.

Draft of 19 October 2026. Effective date: [ALEX TO CONFIRM: effective date].