Local-only, encrypted in your browser, no server calls
Locked until unlocked or saved with a passphrase.
No encrypted note saved
Best effort only: this protects saved notes with encryption, but no browser page can promise absolute immunity if the device,
browser, extensions, or hosting environment are already compromised.