A Personal Note on Your Privacy at Note Pro

Hello everyone, welcome back to Note Pro. If you are a regular reader, you might find it strange that I am writing a dedicated page about data policies. You usually come here for the latest Blogger templates, like the Lantro UI V2.0, or to grab a snippet of CSS to change your mouse cursor into a floating bubble. You come here for coding tutorials, discussions on extreme weather patterns in Vietnam, or to read the deeply personal diary entries from our team members like Kim Anh. A privacy document usually sits at the very bottom of a website footer, ignored by everyone until lawyers get involved. I refuse to let that happen here. Grab a cup of coffee, sit back, and allow me to explain exactly how we handle your digital footprint.

This document is born out of a late-night realization. Just a few weeks ago, I was staring at my monitor at 2 AM, drinking my third cup of coffee. I was deeply focused on debugging the JavaScript for a custom Blogger Management Tool I recently developed. This tool runs entirely on Cloudflare Workers, utilizing a D1 SQL Database and Workers KV to monitor real-time traffic, log IP addresses, and send notifications directly to my Telegram and email via the Resend API. As I watched the raw access logs stream across my screen—seeing exact device fingerprints, geographical locations down to the city level, network types, and even battery percentages—a heavy realization settled over me.

Note Pro is no longer just a tiny, hidden corner on the internet where a high school student from Phan Dinh Phung High School posts random tech thoughts. We have evolved into Note Pro JSC. We serve thousands of readers. When you drop your Gmail address in the comments to receive a piece of source code, you are placing an enormous amount of trust in my hands. With that level of trust comes a non-negotiable responsibility. I needed to step away from the code editor and write this document. I want to offer you a genuine, human-to-human explanation of the mechanics behind our data processing. No corporate jargon. No hidden clauses designed to confuse you. Just the raw, technical truth from a developer directly to his readers.

The Rigorous Legal Framework Guiding Our Operations

Running a technology blog in the year 2026 requires strict adherence to evolving legal standards. Governments around the world, and specifically here in Vietnam, have enacted powerful legislation to protect users from corporate overreach and malicious data harvesting. I respect these laws deeply because they act as a necessary shield for everyday internet users.

In Vietnam, the processing of your information is strictly governed by specific legal documents. Vietnam's Decree No. 13/2023/ND-CP on Personal Data Protection establishes requirements for the processing and protection of personal data. This decree clearly defines what constitutes personal data, classifying things like your IP address, your email, and your browsing habits under its protective umbrella. Depending on the applicable legal basis and circumstances, processing may require the data subject's consent and appropriate notice.

I spent days reading through the official text of Decree 13 to understand my obligations as an administrator. Under Article 11, consent must be voluntary, clear, and fully informed. You have the right to know what data is being processed, for what purpose, who is processing it, and what your rights are. The law explicitly states that silence or a lack of response does not equal consent. However, the decree also outlines specific exceptions under Article 17 where processing can occur without prior consent, such as for the protection of life or fulfilling legal obligations. My goal is to ensure you never have to guess what happens behind the scenes here.

Beyond data protection, the landscape of digital security has shifted significantly. We comply with applicable Vietnamese cybersecurity and personal data protection legislation, including Law No. 116/2025/QH15 on Cybersecurity and Decree No. 13/2023/ND-CP on Personal Data Protection. The new Cybersecurity Law, which came into full effect on July 1, 2026, imposes rigorous standards on how digital platforms must secure their infrastructure against cyber threats, unauthorized access, and data breaches. Migrating our systems to ensure full compliance with Law No. 116/2025/QH15 was a massive undertaking for our small team, but it guarantees that the infrastructure hosting your interactions is fortified to modern national standards.

Furthermore, because Note Pro reaches a global audience—I regularly see traffic routing from Europe, the Americas, and neighboring Southeast Asian countries—I hold our internal practices to the spirit of the General Data Protection Regulation (Regulation EU 2016/679) and the California Consumer Privacy Act (CCPA). Whether you are reading this from a cafe in Hanoi or an apartment in Berlin, your fundamental rights to access, rectify, and erase your digital footprint remain identical on this platform.

Deconstructing Our Data Collection: Active vs. Passive

A completely track-free website is an absolute myth in modern web architecture. Any server requires some level of data exchange just to render a basic HTML page on your screen. However, I categorize the data interacting with Note Pro into two distinct streams: Active Data and Passive Data. I handle each with entirely different security protocols.

Active Data: The Information You Consciously Provide

Active data is the tangible information you voluntarily type into a text field and submit to us. The most common scenario occurs in our comment section. When I release a new premium Blogger template or share a complex script for extracting URLs from an XML sitemap, I often ask interested readers to leave their email addresses in the comments so I can manually send the files.

When you publish that comment, you are utilizing Google's Blogger infrastructure. The platform processes your Google profile name, your public avatar URL, the timestamp, and the text of your comment. I actually wrote a custom script recently—the "Recent Comments" widget—that pulls this exact data via the endpoint /feeds/comments/default?alt=json-in-script to display activity on the sidebar.

I do not extract your email addresses to build a secret marketing database. We do not maintain a private SQL server filled with reader contact information. I solely use the email you provide to fulfill your direct request: sending you the ZIP file containing the code. Once I hit send on that email, the transaction is complete. You will never receive unsolicited newsletters or spam from Note Pro. I despise inbox clutter, and I refuse to subject you to it.

Passive Data: The Silent Technical Footprint

Passive data collection is far more complex. The moment you type note.pro.vn into your address bar and press Enter, your browser initiates a handshake with our servers. Embedded within this request is a string of metadata known as the User-Agent, alongside your IP address.

As I mentioned earlier, I built a highly advanced Blogger Management Tool utilizing Cloudflare Workers. To make the Web Application Firewall (WAF) function correctly, the system automatically logs specific technical parameters. It captures the IP address originating the request, maps it to a geographical region, and identifies the device type and browser engine. Through custom JavaScript executing on the client side, I can even monitor battery status and network connection types (like differentiating between a 5G mobile connection and a stable fiber-optic Wi-Fi line).

Why does a blog need this level of technical telemetry? The reality of operating a website today is brutal. The internet is infested with malicious actors, automated scraping bots, and vulnerability scanners. I have personally witnessed intense attacks where aggressive scripts attempted to clone the entire Note Pro website—ripping every CSS file, every custom template, and every article I spent weeks writing—in a matter of seconds to mirror it on fraudulent domains.

By analyzing IP addresses and device fingerprints in real-time, my Cloudflare Workers can instantly detect non-human, abnormal behavior. If a single IP address attempts to request 500 different pages within two seconds, the firewall triggers an automatic block, effectively neutralizing the threat. This passive data collection relies on the legal basis of legitimate interest and system security. It acts as an invisible shield, ensuring that Note Pro remains online, fast, and accessible for real, human readers like you. The data is a defensive mechanism, not a profiling tool.

The Ecosystem of Third-Party Infrastructure

I am a solo developer supported by a very small, dedicated team. We cannot build physical server farms from scratch. Note Pro operates on top of a massive ecosystem provided by third-party technology giants. Understanding how these entities process your information is a crucial piece of the puzzle.

The Google and Blogger Backbone

Note Pro is fundamentally hosted on the Blogspot platform, which is owned and operated by Google. This means the physical servers storing our HTML, images, and text reside in Google's data centers. When you interact with our site, Google places essential cookies on your browser. These tiny text files help Google manage secure user sessions (especially if you are logged into your Google account while commenting), prevent cross-site request forgery, and ensure the basic functionality of the blogging platform. Google's data processing is governed by their own comprehensive, globally compliant privacy framework. While my team exercises full control over the front-end code and content of Note Pro, the underlying server architecture is securely managed by Google.

Cloudflare: Our CDN and Gatekeeper

Every single byte of data traveling between Note Pro and your device is routed through Cloudflare. You might remember my article from November 18, 2025, detailing a global Cloudflare outage that brought down massive platforms like Canva. During normal operations, Cloudflare serves as our Content Delivery Network (CDN) and primary security perimeter.

Cloudflare temporarily caches our images, CSS stylesheets, and JavaScript files on servers physically located closer to your city, dramatically speeding up page load times. To do this securely, they process your IP address and request headers to filter out DDoS (Distributed Denial of Service) attacks and spam before the traffic ever touches the Google servers. Cloudflare acts as an uncompromising gatekeeper. They utilize this network telemetry strictly to maintain the integrity and speed of the internet; they do not sell your IP address to third-party data brokers.

Analytics, Telemetry, and Content Strategy

I will admit that I am deeply fascinated by data analytics. I genuinely want to know which topics resonate with you. Are you guys more interested in the deep-dive analysis of Vietnam's internet culture, like the rise and fall of early YouTubers, or do you prefer the heavy, technical tutorials on implementing Progressive Web Apps (PWA) on a Blogger platform?

To answer these questions, we employ analytics tools that drop anonymized tracking cookies on your device. These tools aggregate data to show me trends. I look at a dashboard and see metrics like, "A user navigating from a mobile device in Da Nang spent seven minutes reading the article on fixing the FPT Wifi 6 network issue." The crucial word here is anonymized. The analytics platform strips away personally identifiable information. I do not know your name. I do not know your street address. I only see behavioral trends that guide my editorial strategy, allowing Minh Hieu, Kim Anh, and me to dedicate our time to writing the high-quality content you actually want to read.

The Threat of Artificial Intelligence and Content Scraping

We need to address a modern crisis that directly impacts both our intellectual property and your browsing experience: Artificial Intelligence. I wrote a dedicated piece analyzing a report that showed Vietnam topping the charts for AI usage in Southeast Asia. While utilizing AI to debug a line of code or draft a study plan is brilliant, the corporate deployment of AI web scrapers is a nightmare.

Our team holds a strict, uncompromising editorial policy: we do not use AI to generate blog posts. Every single article, every tutorial, and every piece of diary writing on Note Pro is crafted by human intellect, emotion, and effort. Unfortunately, automated bots deployed by massive AI companies roam the internet relentlessly, ignoring standard `robots.txt` protocols, scraping human-written content to train their Large Language Models (LLMs) without offering compensation or credit.

When these aggressive AI scrapers hit our domain, they consume massive amounts of server bandwidth. This slows down the website for you, the legitimate reader. This ongoing battle is another primary justification for our stringent firewall rules and passive data monitoring. By actively identifying and blocking the IP signatures of these data-harvesting bots, we protect our copyrighted material and simultaneously preserve the server resources necessary to deliver a fast, seamless reading experience for you. Protecting privacy and securing infrastructure go hand in hand.

Demystifying Cookies: Beyond the Warning Banners

The web relies heavily on cookies, and I want to explain exactly how we use them on Note Pro without the confusing legal jargon usually found in cookie banners.

When you interact with the customized elements of our theme—for instance, when you click a button to toggle between light mode and the dark mode designed for late-night reading—that specific preference must be saved somewhere. We utilize your browser's `localStorage` or set a localized cookie to remember that choice. If we did not implement this mechanism, the website would blind you with a bright white background every single time you navigated to a new page or refreshed the browser at midnight.

These are classified as essential and functional cookies. They exist solely to make the website usable and to enhance your user interface experience. We also allow performance cookies to measure site speed and detect rendering errors. We actively refuse to implement intrusive, cross-site tracking cookies. We do not partner with ad networks that follow your digital footprint across the internet to serve you targeted advertisements for a pair of shoes you looked at three days ago on an e-commerce site. If we ever monetize Note Pro through advertising, it will be strictly contextual, based on the content of the article you are reading, not based on invading your personal browsing history.

Executing Your Absolute Rights Over Your Data

Under the legal frameworks of Decree 13/2023/ND-CP and international privacy laws, you are the definitive master of your digital identity. You do not lease your privacy rights when you visit this website; you own them entirely.

• The Right to Access: You possess the right to request a complete record of any personal information we hold regarding you. Because our data retention is incredibly minimal, this typically consists only of the public comments you have left on our articles.
• The Right to Rectification: Mistakes happen. If you left a comment requesting a template but accidentally misspelled your email address, you can contact us to rectify the error immediately.
• The Right to Erasure (The Right to be Forgotten): This is a fundamental protection. If you left a comment on an old post from August 2025 and you now regret it, or simply want your digital footprint minimized, you have the absolute right to demand its deletion. Upon receiving your request, I will personally log into the Blogger administrative backend and permanently erase the comment from the database. We ask no questions and require no justifications.
• The Right to Restrict Processing: You are entirely free to browse Note Pro using a strict incognito mode window, utilize heavy ad-blocking extensions, or disable JavaScript and cookies in your browser settings. The core textual content of our articles will remain accessible to you, although advanced aesthetic features and personalized UI settings will inevitably cease to function. We respect your choice to prioritize maximum anonymity.

To exercise any of these rights, you do not need to hire legal representation or fill out complex bureaucratic forms. You simply need to reach out to us. You can contact me directly, or send a message to Ninh Thi Kim Anh via the contact forms and social media channels linked on our designated Contact Page. We process these requests manually as a human team, ensuring your concerns are addressed with empathy and speed.

Security Architecture and Data Retention

Storing vast archives of unnecessary user data is not just unethical; it represents a massive security liability that I refuse to take on. Our retention policies are designed to be as minimal as functionally possible.

The security and traffic logs generated by Cloudflare—the logs that capture IP addresses to mitigate DDoS attacks—are highly ephemeral. Cloudflare automatically overwrites and purges these logs based on their internal retention schedules, usually within a matter of days. I do not export this data. I do not keep an offline Excel spreadsheet containing the IP addresses of my readers on my personal laptop. Doing so would violate basic cybersecurity principles.

The comments you leave, and the email addresses associated with them, remain visible on the blog for as long as the specific article exists, serving the purpose of fostering community discussion and technical support. However, as emphasized previously, the moment you invoke your Right to Erasure, that retention period terminates immediately.

Regarding security infrastructure, Note Pro enforces strict HTTPS encryption utilizing robust SSL certificates. When data travels from your mobile device or computer to our servers, the entire connection is cryptographically secured. Even if a malicious actor intercepts the packets on a public Wi-Fi network, they will only intercept indecipherable ciphertext.

Internally, I regularly conduct deep code audits on the scripts we deploy. Before I publish a guide on a new template, I manually inspect the source code to guarantee the absence of hidden backdoors, malicious iframes, or unauthorized tracking scripts injected by third-party designers. Furthermore, administrative access to the Blogger backend is locked down behind complex, randomly generated passwords and strict, hardware-based Two-Factor Authentication (2FA). We treat the security of our publishing platform with the utmost severity.

An Unbreakable Commitment Regarding Data Monetization

I want to make a definitive statement, etching it directly into the HTML of this page so there is zero room for ambiguity: Note Pro JSC does not, has not, and will never sell, rent, or trade your personal data to data brokers, marketing agencies, or any third-party entities.

This blog was created out of a pure passion for technology and writing. We dissect code, we build tools to extract URLs, we analyze the sociopolitical impact of internet culture, and we occasionally share vulnerable, personal stories about the challenges of growing up. The relationship we have built with you is based entirely on trust. Attempting to monetize your email addresses for a quick financial gain would instantly destroy everything I, Minh Hieu, and Kim Anh have worked tirelessly to build since the summer of 2025. It directly contradicts our foundational ethos of "Sáng Tạo" (Creativity) and technical integrity.

The Living Nature of This Document

The technology sector evolves at a terrifying, relentless pace. Legislative bodies pass new laws, API endpoints are deprecated by Google, and the fundamental architecture of the web shifts constantly. Therefore, this privacy document is a living text.

If Cloudflare introduces a radically new routing protocol that affects data transmission, or if the Vietnamese government issues an updated circular regarding the implementation of Decree 13/2023/ND-CP, I will return to this page and revise the text accordingly. I will never attempt to hide these modifications. If a substantial shift occurs in our data processing methodology, I will author a dedicated, front-page blog post to announce it transparently, just as I do when we launch a new logo or redesign the website's user interface.

Concluding Thoughts on Operating in the Digital Era

Writing this comprehensive breakdown has been exhausting, but it is an absolute necessity. Back when this project was just a tiny blog named "Note" sharing copy-paste code snippets, managing the site was simple. Today, steering Note Pro JSC, configuring DNS records, managing API keys, and bearing the responsibility of user data security applies an immense amount of pressure. Yet, I love every second of it. I find immense satisfaction in building tools for this community, reading your feedback, and watching your own projects succeed using the resources we provide.

Understanding privacy should never feel like deciphering an obscure legal contract; it must be treated as a fundamental human right, deeply integrated into the very code that powers the internet. I sincerely hope that reading this document has provided you with a transparent, unfiltered view into the engine room of Note Pro. We are not a faceless, data-hungry corporation. We are a small team of young Vietnamese developers striving to make the web a slightly more creative, functional, and deeply secure place for everyone.

Đừng quên nhấn vào chiếc chuông màu xanh dưới góc phải màn hình để nhận thông báo mới nhất từ Note Pro nhé.

Lời kết

Cảm ơn các bạn đã đọc bài viết này, đến đây chúng tôi chúc bạn một ngày tốt lành và hạnh phúc bên người thân và gia đình nhé. Tạm Biệt.