Privacy Policy
Last updated: June 2026
Overview
Section titled “Overview”N2O (“Notion to Obsidian Sync”) is an Obsidian community plugin that syncs content between your Notion workspace and your Obsidian vault. N2O is local-first - all synced content is stored on your device, and N2O never routes your notes through any intermediary server.
What Data N2O Accesses
Section titled “What Data N2O Accesses”N2O accesses only the Notion pages and databases that you explicitly authorize via your Notion integration token. N2O reads and writes:
- Page content (blocks, text, media)
- Database properties and entries
- Page metadata (titles, icons, covers, timestamps)
N2O does not access Notion comments, permissions, workspace members, or any content outside the pages shared with your integration.
External Network Requests
Section titled “External Network Requests”N2O makes network requests to the following services. No other external calls are made.
| Service | URL | Data Sent | Purpose |
|---|---|---|---|
| Notion API | api.notion.com | Your integration token + page/block requests | Core sync functionality |
| Notion Unofficial API | www.notion.so/api/v3/ | Your token_v2 session cookie (only if you enable Enhanced Metadata) | Retrieve layout metadata not exposed by the official API (embed subtypes, image sizes, column widths) |
| Sequenzy | n2o-lic.vercel.app | Email address (only if you opt in) | Product lifecycle emails (trial, purchase, updates) via the N2O license server |
| Gumroad | api.gumroad.com | License key (only if you activate Pro) | License verification |
| N2O License Server | n2o-lic.vercel.app | License key + device ID | License activation, device management, and receiving Gumroad webhook events (sale/refund/cancellation) for automatic license lifecycle |
| Sync diagnostics | n2o-lic.vercel.app | Sanitized error codes + environment info, tied to your license (on by default, opt-out) | Help diagnose and fix sync failures |
Notion API
Section titled “Notion API”- N2O communicates directly with Notion’s official API using your personal integration token.
- Your token is stored locally in Obsidian’s plugin data (
data.json) and is never sent anywhere exceptapi.notion.com. - N2O is not affiliated with or endorsed by Notion Labs, Inc.
Notion Unofficial API
Section titled “Notion Unofficial API”- Used only when you enable Enhanced Metadata in N2O settings - disabled by default.
- Calls
www.notion.so/api/v3/using yourtoken_v2session cookie, which you provide manually. - The
token_v2cookie is stored locally in Obsidian’s plugin data and is never sent anywhere except Notion’s own domain. - No additional personal data is transmitted - requests are structurally identical to your browser’s own Notion session calls.
Sequenzy
Section titled “Sequenzy”- Sequenzy is used for product lifecycle emails (trial reminders, purchase confirmations, product updates).
- The plugin does not call Sequenzy directly - all email operations are handled server-side by the N2O license server (
n2o-lic.vercel.app). - Email is submitted only when you explicitly click “Subscribe” or “Start Trial” in settings.
- Double opt-in confirmation is required before any emails are sent.
- You can unsubscribe at any time via the link in any email.
Gumroad
Section titled “Gumroad”- License key validation occurs only when you click “Activate” in settings.
- Only the license key string is sent - no personal data, usage data, or vault content.
N2O License Server
Section titled “N2O License Server”- Handles license activation and device management when you activate a Pro or Lifetime license.
- Receives webhook callbacks from Gumroad for sale, refund, and cancellation events to automatically manage license lifecycle.
- Stores only: license key hash, device ID, activation timestamp, and license tier. No vault content, sync data, or personal information is stored on the server.
- Device binding (paid licenses). To enforce your plan’s device limit, N2O derives a fingerprint from stable hardware signals on your computer (such as the OS machine ID, primary network adapter, and hostname). Each signal is one-way hashed on your device before it is sent to our licensing provider (Keygen). We send and store only the hashes; your raw hardware identifiers never leave your device, and the hashes cannot be reversed back into them or used to identify you elsewhere.
Sync diagnostics
Section titled “Sync diagnostics”- When you hold a license (trial, Pro, or Lifetime), N2O sends a small diagnostics payload to the license server after each sync to help us spot and fix sync failures.
- The payload contains classified, sanitized error codes plus environment info (plugin version, Obsidian version, platform, sync mode, counts of pages/databases synced, duration, and whether you were rate limited), tied to your license key and device ID.
- Error and warning text is sanitized before it leaves your device: tokens, emails, URLs, and file paths are stripped, and messages are truncated. Your note content, file names, tokens, and email address are never included.
- This is on by default but fully opt-out - turn it off with the “Share sync diagnostics” toggle in N2O Settings > Account. When off, nothing is sent; recent errors are still kept in memory only so the “Copy diagnostics for support” button works.
- Users without an active license (for example, after the trial ends) send no diagnostics at all.
What N2O Does NOT Do
Section titled “What N2O Does NOT Do”- No content telemetry - Your notes, file names, tokens, and email are never transmitted. The optional sync diagnostics described above send only sanitized error codes and environment info, and can be switched off in one click.
- No tracking - No cookies, no third-party analytics, and no fingerprinting for advertising or tracking. The one exception is the hashed hardware binding used purely to enforce your license device limit (described under N2O License Server above); it is never used to profile or track you.
- No ads - No advertising of any kind.
- No third-party data sharing - Your content is never shared with anyone.
- No cloud storage - All synced content lives on your local filesystem.
- No unsolicited network calls - N2O contacts external services only when you explicitly trigger an action (sync, license activation, email opt-in). When “Get changes from Notion” or “Send my edits to Notion” is enabled (Pro), N2O calls the Notion API in the background to check for and apply changes.
Local Data Storage
Section titled “Local Data Storage”| Data | Location | Format |
|---|---|---|
| Synced content | Your vault (sync folder) | .md files |
| Sync state | Plugin data folder | n2o-core.db (SQLite via sql.js) |
| Sync history | Plugin data folder | n2o-history.db (SQLite via sql.js) |
| Settings | Plugin data folder | data.json |
| Base versions | Plugin data folder | .md files |
| Block cache | Plugin data folder | .json files |
| Downloaded media | _files/ subdirectories | Original file formats |
Data Retention & Deletion
Section titled “Data Retention & Deletion”- You control all data. N2O stores everything locally in your vault.
- Disabling the plugin stops all sync activity immediately.
- Uninstalling the plugin removes all plugin data (
data.json,n2o-core.db,n2o-history.db). - Synced markdown files remain in your vault until you delete them.
- To fully remove all N2O data: uninstall the plugin and delete the sync folder.
Third-Party Privacy Policies
Section titled “Third-Party Privacy Policies”Children’s Privacy
Section titled “Children’s Privacy”N2O does not knowingly collect data from children under 13. N2O does not collect personal data at all beyond the optional email submission described above.
Changes to This Policy
Section titled “Changes to This Policy”We may update this privacy policy from time to time. Changes will be noted in the “Last updated” date at the top. Continued use of N2O after changes constitutes acceptance.
Contact
Section titled “Contact”For privacy questions or concerns, email support@n2osync.com.