CryptPad and privacy - pad.leuphana.de

LAST MODIFIED ON 31 August 2022

CryptPad is a collaborative office suite that is end-to-end encrypted and open-source. It uses encryption so that the service's administators have no access to the content of the files you store. This is the main feature that differentiates CryptPad from other similar services.

Privacy is the core value of CryptPad. The team makes every effort to preserve users’ privacy following the principles defined by the Privacy by Design framework.

We limit the processing of personal data to what is strictly necessary to provide the service.

CryptPad is 100% open source software, client and server. Anyone can inspect its source-code and host the service in a personal or professional capacity.

In this document, "we" refers to the administration team. We are employees of Leuphana University Media and Information Centre.

What we know about you and how we use this information

Non-registered and Registered users

Like any website, CryptPad has access to metadata sent by the browser when requesting web pages, such as your IP address, what browser you use, and other HTTP headers. We use this data to infer how many users visit from a particular country or with a particular type of device so that we can better serve popular use-cases.

We are able to observe metadata about documents, such as their size, the ids of the user accounts that created them, and when they were edited. This information is only used to operate the service in legitimate interest.

What we tell others about you

Non-registered and Registered users

We do not furnish any information that we learn about you to third parties.

Cookies and browser storage

CryptPad uses persistent storage in users' browsers, such as localStorage, indexedDB, and related storage methods that are legally classified as cookies. These are applied to maintain a continuous session across browser tabs and successive visits to the site, to decrease loading times, and to remember per-device preferences like the use of dark mode.

Persistent identifiers stored in this manner are consistent with the legitimate interest clause of the GDPR. They are only used to implement users' expected functionality and not to track individual behaviour.

Data subject rights under European legislation

If we have personal information about you as a CryptPad user, you have the following rights under European legislation:

You can make a request about your personal information by contacting us.

Getting in touch

We can be contacted at it-service@leuphana.de.