File size: 3,267 Bytes
8c01e05 5534454 8c01e05 5534454 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 |
---
title: Paper
emoji: 📝
colorFrom: purple
colorTo: pink
sdk: docker
pinned: false
---
# Paper ✨
A minimal, secure notepad for temporary notes. Zero tracking, zero accounts — just encrypted notes.
## Features
- 🔐 **Client-side encryption** — Your password never leaves your browser
- 🗑️ **Auto-delete** — Notes removed after 2 days of inactivity
- 🌐 **Access anywhere** — Same password = same note, from any device
- 🚫 **No tracking** — No cookies, no analytics, no accounts
## How It Works
```
┌─────────────────┐ ┌─────────────────┐
│ Browser │ │ Server │
├─────────────────┤ ├─────────────────┤
│ │ │ │
│ Password ──────┼─► SHA-256 Hash (16 char) │
│ │ │ │ │ │
│ ▼ │ │ ▼ │
│ PBKDF2 Key │ │ File ID │
│ (250k rounds) │ │ (no password) │
│ │ │ │ │
│ ▼ │ │ │
│ AES-GCM │ │ │
│ Encrypt/Decrypt│◄───────►│ Store/Load │
│ │ │ Encrypted Blob │
└─────────────────┘ └─────────────────┘
```
**Key points:**
- Password → PBKDF2 → AES-256-GCM key (client only)
- Password → SHA-256 → File identifier (sent to server)
- Server stores only: encrypted content + random salt
- Server never sees: password or decrypted content
## Architecture
```
Paper/
├── index.html # Single-page app (HTML + CSS + JS)
├── main.py # Flask backend
├── Dockerfile # Container setup
└── requirements.txt
```
### Frontend (`index.html`)
- Single HTML file with embedded CSS and JavaScript
- Crypto API for AES-GCM encryption and PBKDF2 key derivation
- Auto-save with debounce (1.5s after typing stops)
- Dark theme with colorful accents
### Backend (`main.py`)
- Flask server with CORS support
- Two endpoints: `/api/load` and `/api/save`
- File-based storage (configurable via `DATA_DIR`)
- Auto-cleanup: files older than 2 days or when storage exceeds limit
## Environment Variables
| Variable | Default | Description |
|----------|---------|-------------|
| `DATA_DIR` | `/tmp` | Storage directory |
| `AGE_LIMIT_DAYS` | `2` | Days before auto-delete |
| `MAX_TOTAL_SIZE_MB` | `100` | Max storage size |
| `MAX_CONTENT_SIZE_MB` | `10` | Max note size |
## Run Locally
```bash
# Install dependencies
pip -r requirements.txt
# Start server
python main.py
```
Open http://localhost:7860
## Deploy
### Docker
```bash
docker build -t paper .
docker run -p 7860:7860 paper
```
## Security Notes
- All encryption happens in your browser
- Password is never transmitted or stored
- Server cannot decrypt your notes
- Use a strong, memorable password
- No password recovery possible
## License
MIT
|