Closing an online notepad tab does not necessarily remove the note. On a shared computer, use the page only for low-risk temporary text, press its Clear control before leaving, reopen the page to confirm it is empty, and separately handle anything copied to the clipboard or downloaded as a text file.
Decide whether the note belongs on a shared computer at all
The safest shared-computer note is one that would cause little harm if the next user saw it. Do not paste passwords, recovery codes, private keys, full payment details, medical records, personnel cases, unpublished contracts, or an identifiable customer list into a public-library or hot-desk browser.
For example, consider a library user who needs a five-line checklist while completing a public form. A note containing “upload receipt, confirm page count, record reference number” may be reasonable if it contains no account or personal details. A note containing the applicant's name, date of birth, address, case number, and login reset link is not a low-risk scratchpad. Use the organization's approved system or wait for a trusted device instead.
Replacing names with short placeholders can reduce exposure. The PII Masking Tool can flag some pasted names, phone numbers, IDs, email addresses, and street-address patterns, but it is rule-based and can miss uncommon identifiers. It does not make a sensitive note safe, and its result still needs line-by-line review.
Understand what this notepad saves in the browser
The current Online Notepad stores one note under a named localStorage key in the browser. It reloads that key when the page opens and saves shortly after typing, when the page becomes hidden, and when the page is being left.
That design explains why closing the tab is not cleanup. MDN's current localStorage documentation says stored data is saved across normal browser sessions and has no automatic expiration time. The data belongs to the site's origin, so returning to the same site in the same browser profile can restore it after a browser restart.
The component provides character, word, and line counts, a Markdown preview, Copy, Download, and Clear. It does not provide a password, encryption, automatic expiry, an account, cloud backup, or access controls. Its code stores the note locally and does not send the note text through a network request, but that boundary is not a privacy guarantee. Browser extensions, device monitoring, screenshots, clipboard history, and local backups are outside the component's control.
Storage can also fail or behave differently when a browser policy blocks persistence. Do not treat the “Auto-saved” label as a durable backup promise. If the text matters, move it to an approved destination before cleanup; if it is sensitive, it should not have been entered on the shared device.
Clear the browser note and verify the result
Cleanup requires an explicit clear-and-reopen check. Finish the task, move any permitted result to its approved destination, then return to the notepad in edit view and select Clear.
The current Clear action asks for confirmation, empties the text area, cancels a pending save, and removes the notepad's own storage key. After confirming, close the tab, open the Online Notepad again in the same browser profile, and verify that the editor is empty. Type nothing during this check, because new input creates a new saved note.
If the previous text returns, do not hand the computer to the next person and assume the page will fix itself. Stop using that browser session for the task and follow the library, employer, or device owner's approved procedure for clearing site data or ending the guest session. The article cannot provide one universal menu path because browser versions and managed-device policies differ.
Clearing this note removes only the key used by this component. It does not clear other sites' storage, browser history, recently opened files, operating-system records, or an account session. Sign out of the service you were actually using and complete the shared device's normal handoff checklist as separate steps.
Account for downloaded and copied versions separately
Every Copy or Download action creates another version outside the notepad's storage. Clearing the editor does not recall those versions.
Copy places the note text on the system clipboard through the browser. Another application may still be able to paste it, and a device can have clipboard-history features or management software that the page cannot inspect. Avoid copying sensitive content on a shared machine. If you copied low-risk text, follow the device owner's approved clipboard and sign-out procedure rather than relying on the web page to erase it.
Download creates a separate UTF-8 .txt file with a date in its filename. The file remains wherever the browser saved it until the device's file-handling policy removes it. Before leaving, confirm whether a download was created, move only an authorized copy to its intended destination, and dispose of the shared-device copy according to the site's rules. Pressing Clear in the notepad does not delete that file.
A screenshot, printout, browser autofill entry, or text pasted into another form is another independent copy. Make a small copy inventory before leaving: browser note, clipboard, Downloads folder, destination form, and any account session. Mark each one as retained for a reason or cleaned up through the approved method.
Treat private browsing as a limited storage change
Private browsing changes the lifetime of localStorage, but it does not turn a shared device into a trusted workspace. MDN says localStorage created in a private or incognito session is cleared when the last private tab closes.
That behavior can reduce the chance of the same browser reopening the notepad text later, but it does not remove downloads, pasted copies, screenshots, clipboard history, monitoring, or records kept by the destination service. It can also be disabled or managed differently by an organization. Use private browsing only if the device owner allows it, and still perform the note's Clear and reopen check before closing the last private tab.
Do not use private mode as permission to process higher-risk information. The decision about what may be entered should be the same as in a normal window: low-risk temporary text only, with a clear business reason and a cleanup plan.
Complete a shared-computer handoff check
A complete handoff verifies the exact traces created during the task. Before walking away, confirm each of these items:
- The Online Notepad reopens with an empty editor in the same browser profile.
- Any downloaded
.txtfile has been handled under the device owner's policy. - No sensitive text remains in a destination form, draft message, or open tab.
- You have signed out of every account used for the task and closed the permitted session.
- The final authorized copy is in its intended destination and does not contain unnecessary identifiers.
This check reduces avoidable exposure but does not certify the computer as clean or private. On a managed, monitored, or public device, follow the operator's rules and use a trusted device for any task that requires confidentiality.
Frequently asked questions
Does closing the tab delete the note?
No. The current component uses localStorage, which normally persists across browser sessions. Use Clear, confirm it, reopen the page in the same profile, and verify that the editor is empty.
Does Clear remove a text file I downloaded?
No. Download creates a separate .txt file outside the notepad. Handle that file through the shared device's approved file-cleanup procedure.
Is the saved note encrypted or password-protected?
No. The current component does not add encryption, a password, automatic expiry, or account access control. Do not put confidential material in it on a shared computer.
Is private browsing enough for sensitive notes?
No. Private localStorage is cleared when the last private tab closes, but downloads, clipboard copies, screenshots, monitoring, and destination-service records can remain. Private mode is not a complete privacy boundary.
Can PII masking make a customer list safe to paste?
No. The masking tool uses practical patterns and can miss uncommon names, account codes, or identifiers. Use it only for authorized, limited text and review every line; it does not replace an approved data-handling process.