NOXENPrivacy is useful when its limits are written down. Here is exactly what this site handles, what reaches the chain, and what neither of them protects.
Fields, values, salts and file fingerprints are computed in the page you have open. The site has no upload endpoint for them and its server never receives them.
By default a draft lives in page memory and is gone when you reload or close the tab. If you switch on “Kept in browser”, drafts (values and salts included) are saved in this browser's local storage until you delete them or switch keeping off, which clears them.
Anchoring sends one transaction from your wallet to the record book on Robinhood Chain: a 32-byte root and an optional label of up to 31 characters. Both are public and permanent, together with your address and the block time.
Revocation adds a public timestamp; it does not delete anything. Nothing on a public chain can be deleted.
Blockchain data is visible to everyone. A root reveals nothing about hidden fields, because each field carries a random salt, but your address, the time and the label can be linked to you by other means.
Selective disclosure is not anonymity. It limits what you share; it does not hide that you shared something.
The site does not keep your document anywhere, encrypted or not. The sealed file you download holds every field in plain text plus the salts; keep it somewhere private and never send it to anyone.
Encrypted storage and access lists are planned features. They are not built, and nothing on the site claims otherwise.
To show live chain data the site reads Robinhood Chain through its own read-only relay. That relay sees ordinary request data (your network address and the public addresses or roots being read) and applies rate limits per network. It forwards no signed transactions and stores no request bodies.
There are no accounts, no advertising trackers and no analytics scripts on this site.
Connecting shares your address. A real anchor or revoke is a transaction you read and sign in your wallet. In practice mode your wallet signs a plain message instead; it cannot transfer funds or grant token allowances.
Never paste a seed phrase or private key anywhere on this site. It will never ask for one.
A passing check shows that a value was part of a document whose root a given address anchored at a given time. It does not show the document is accurate or who controls that address. Judge the source as you would any document.