What is NoteFlare?

NoteFlare is a notes app you host yourself on Cloudflare. It is for people who want the simplicity of Google Keep without handing their notes to anyone, including the server they run on. It suits individuals and small groups: Cloudflare Access is free for up to 50 users.

Read this first

Lose both your passphrase and your recovery code and your notes are unrecoverable. Nobody can reset them for you. That is what real end-to-end encryption means.

What it looks like

What you get

• End-to-end encryption. Argon2id and AES-256-GCM run in your browser. The server stores only ciphertext.
• Free to run. One Worker, one D1 database, Cloudflare Access, all on the free plan.
• Markdown notes. Headings, code, tables, quotes and - [ ] checklists you can tick on the card.
• Organize your way. Pin, 8 paper colors, labels, archive, and a trash that empties itself after 30 days.
• Drag-and-drop import. Drop a folder of Markdown (an Obsidian vault works) and each .md file becomes an encrypted note.
• Installable and offline. Add it to your home screen. Changes sync when you are back online.
• Multi-device sync. Edits to the same note from two devices are merged line by line.
• Recovery code. Forget your passphrase without losing your notes.
• Auto-lock. Keys are wiped from memory after 15 minutes idle or with one click.
• API, SDK and CLI. Build your own clients with personal access tokens.

How the pieces fit

Your browser

React appservice worker caches it for offline

CryptoArgon2id, AES-GCM. Keys stay here

Sync enginequeue, three-way merge

IndexedDBciphertext + unsynced edits

ciphertext
over HTTPS

Your Cloudflare account

Cloudflare Accesssign-in, MFA, sessions

Worker (Hono API)verifies the Access JWT, serves the app

D1 databaseciphertext and wrapped keys only

Cron triggerempties the trash after 30 days

Scripts, the CLI and the SDK use the same path through /api/v1 with a personal access token.

Everything interesting happens in your browser: encryption, decryption, offline storage, sync and merging. Cloudflare stores and returns blobs it cannot read.

Next

Start with Deploy in one click.