Security

CurbPlace is end-to-end encrypted and zero-knowledge.

Encryption

• Note content is encrypted client-side with AES-GCM before sync.
• A master password protects the account key using the memory-hard Argon2id key-derivation function.

Zero-knowledge

The sync server stores only encrypted blobs. Note titles, content, tags and folder structures are never visible to the server.

Sharing

A shared note link carries the note's content encrypted inside the link. You can add a password, and the server relays the payload without ever reading it.