LemonSqueezy rejected my note taking web app so I'm releasing it for free. End to end encrypted offline markdown notes. Everything encrypted with a vault key that never leaves your device, no one else can read it, not even me. I use it all the time, even with sensitive data.

You can try it out at (hmm, have I added an og:image yet)

This is insane. Would love to add it on

Go for it!

md note taking on the web client side, nice But I like the ux on this

Very clean, Arpit!

What do they even have to "reject"? Isn't that a payment provider? I'm confused.

Well, LemonSqueezy is a Merchant of Record so I suppose they're more strict since they're legally the front for it. I think setting up Stripe for example would've been zero issue, where they're just the payment provider.

Ohhh, I understand. It seems everyone has moved off lemon recently and yeah, stripe doesn't really care, but if you're specifically looking for a MoR I'd suggest @polar_sh or @PaddleHQ.

@hesselbom @polar_sh @PaddleHQ Why those are better? Paddle or polar

@hesselbom @polar_sh @PaddleHQ Well, because they actually have people working on it, whereas lemon seems abandoned (by stripe who acquired it). Check what people are saying

@hesselbom @polar_sh @PaddleHQ Uh! Scary indeed! I was about to start using it 😂 Time to look update the code for an alternative paywall!

@hesselbom @polar_sh @PaddleHQ If you need MoR, I'd say go with @polar_sh, otherwise go with @stripe.

"end to end encrypted" and "offline" shouldn't appear in the same sentence (unless you just mean "I have a service worker"?)

Can you make it open source?

Probably not. Why would you want it to be, Serg?

@serglotz It also proves that you can’t *actually* read the notes that anyone writes. I am not doubting you i am sure that it is encrypted like you mentioned but instead of trusting your words anyone can look into code and understand what really happens. since website is free why not?

@serglotz Makes sense. You can also monitor network traffic to verify that the vault key is never sent to the server and that all updates are sent encrypted.

@kaanmertkoc @serglotz But this is not as definitive as seeing the code. You could easily do things like sending it with later with a cron-like structure and sifting through a huge-ass network log is rather unfun 😅 I'd second the open source request! I think I'll try it on your host first.

@kaanmertkoc @serglotz If you have some way to send you money for it I'd also pay for it to selfhost. :)

@kaanmertkoc @serglotz I'll hit you up if I ever go down that route, I get the security feeling of it!

@CodeMonument @kaanmertkoc You are missing an opportunity here. Don’t underestimate OSS distribution powers. And people are still willing to pay for “done for you” services. Many examples where the version where you need to compile to set up etc is OSS/free.

So just but worse?

Obsidian is slow, clunky and sync is not free. Other than that, pretty much, yeah.

Slow and clunky? How?

How? I suppose that's the way they built it. I really tried loving it but notes took seconds to load on my Android. Felt bloated. Trying to do too much for me. I prefer just notes.

It’s open source why not contribute? Your project isn’t bad for a portfolio but realistically it isn’t going to go anywhere

Not for me, I prefer building my own products. I contribute to open source when I find some specific issue that affects me and I can help with but don't actively seek out other people's projects to work on. But huge kudos for those who do!

Care to integrate with calendar to make the notes schedulable, and still searchable? My prototype (all localStorage, no server sync or encryption yet, more of an UI test but has an extensive search function).

Looks great, Leo! I don't think it's a fit for this project, want to keep it super simple and avoid feature creep.

why they rejected it?

They didn't think it looked like a finished product. I've been using if myself for months and it I respectfully disagree with them! :)

So you made obsidian but I lose all my plugins and can’t search in-note? *rushes to download and switch* lol

Please don't use it, Kahuna, it's definitely not for you.

lmao you were at no risk of that being something you needed to worry about

Perfect, thank you!

lmao I’m crying laughing

Please don't cry, Kahuna.

try using @dodopayments

what library did you use for WYSIWYG markdown?

Why not a desktop app? E2E encryption is a great feature but if you never send files through the web...

Because I like having it on my phone and desktop, and installing it as a PWA is a great experience on both. But if it gets popular I'll probably port to native. As for encryption, I don't like anyone being able to read what I write, so that was a core feature for me.

@pasmichal_ I suppose he was pointing out the always pointed out web app problem that the attacker could just replace the JS with one that steals your keys (and even PWA can't fix that). But then, I have never heard of a single recorded case of that being done in practice with some app.

@hesselbom I was hinting that not everything needs to be a web app

@LeoVasanko We've gone full circle from "not everything needs to be an app" to "not everything needs to be a web app"!

@pasmichal_ @LeoVasanko With the state of hardware/software released by big tech, (e.g.: Absolutely, horribly broken horse shit put out by Apple): Oh yes, everything needs to be a web App.

@hesselbom @LeoVasanko Hate to break it to you but Web apps also require hardware to run

Nice, I create something similar, but for credentials, I use Flutter, and the app is called Tecred

Great for storing and sharing env files

use @polar_sh brother..

@polar_sh I feel like a boomer

Does LemonSqueezy even work still? Looked at their reddit page not so long ago and everyone was complaining that it's having a lot of issues after stripe acqusition announcement Try gumroad if that fits your needs, or paddle

How to delete notes?

Looks great! Why not store data locally? Since the only device that would be able to access these notes would be the one that is used for creating it. Correct? Your answer will be helpful.

i thought TODO apps were useless, but this is another level 🤣

What do you mean, Anthony?

There are built-in note-takers on every OS and a bunch of public from app stores. With encryption, calendar sync and offline mode as well. Yet you do a web-based. For what? What's the problem you solving? I can't even imagine a person going to a website to... add a note? Really?

I've tried a lot over the years and never found one that I liked, so I built my own that I like. It's as simple as that really. About going to a website, people use Google Docs and Notion all the time.

1. ok, if you built it for yourself - why would you need payment gateway? 2. Google docs and Notion have quite a little more features then note taking. Comparison makes no sense.

1. To make money. 2. You're clutching at straws. How about Google Keep?

curious on how you built the text editor? was it editorjs or another external library or did you make it from scratch. it’s absolutely lovely btw

It's actually codemirror! Would never attempt to write that myself, too many edge cases, and even codemirror isn't perfect.

Classic 'Layer 8' failure by their compliance team. They likely saw 'encrypted vault' and their risk algorithms hallucinated 'money laundering' or 'illegal content hosting'. But this highlights why Local-First software is the only future that matters. If your app works offline and the key never leaves the device, you don't need their permission to exist. You just proved why we need to decouple software from gatekeeping payment APIs.

I built something similar, also E2EE and free, but available on iOS (and web app read only). Check it out: More on how security works:

I love the idea. I’d like to migrate all my notes here, but I’m concerned about losing my notes if the storage is out of commission. Is there a long term plan to self host or have users pay for managed storage, esp for those looking to integrate this fully?

I like the idea, kudos. There's a glitch when use hard reload in the browser, see the video. Also, it would be great if there is a "share" button so I can make the note public to share with someone.

Thank you for reporting, Vinicius! I believe it should be fixed now. I like the idea of sharing some notes public. It'd have to remove the encryption for those notes though probably, which I guess isn't a problem if the note is public anyway.

@vicainelli One way to do it is to re-encrypt it with a random key and then give an URL like this: /pub/{note_id}#{key} The server won't see #{key} (of course, unless the client sends it :), but the user will be able to decrypt.

@vicainelli Ah, I really like that. Great idea, Dmitry!

Want an alternative to lemonsqueezy?

What's your best suggestion?

1. Try @dodopayments . @ayushagarwal might help 2. Would love to know more about encryption. How does it work over web? Does it work only on one device, since key in on that one? Or does it use mechanism like whatsapp? I am heyremember[dot]app. Also a completely offline. Planning to release soon with image support. Been wondering how to make it accessible across devices without comprising with user's privacy.

@dodopayments @ayushagarwal The vault key is the authentication, so a user signs in with the same vault key on every device and the notes are synced through sending each encrypted update.

Wait lemonsqueezy can reject an app?

hi viktok...just trying it out...looks so good and clean but how to delete a note? and are the text inside the notes not searchable? coz everytime i type a phrase into the search bar its creating a new note with that phrase instead of searching for it in the notes

No delete button yet, will add it! Only titles are searchable. Due to the nature of how the notes are encrypted it's almost impossible to make the full text searchable unfortunately, so make sure to name your titles well.

Thanks for sharing!🤗

Explain the 142k views please.

Haha, you tell me! If I would've known I would've made more effort with the video.

Tell me the secret 😅

Some people think the app is great and some people think the app is stupid and shouldn't exist. Both sets want to share their opinion, and I suppose that did it. But also a big chunk of randomness honestly.

Hey, I also worked on a note-taking app a while ago with e2ee save sharing if you wanna take a look there.

Very cool! Initial thought when opening on my phone is that I'd like a pinch to zoom.

Oh totally, it was designed Mac-first because that's what I mainly use in class.

This is great!! what do you mean they rejected it?

They didn't see it as a finished product so wouldn't allow me to use them for payments.

Try -

How do you use it if you can’t even read it?

Hah, good question. So my server can't read anything that users write, because it never sees the vault key. But as long as I personally have my vault key I can see all my notes, since they're all encrypted with that vault key.