2026/05/28
Import from URL & Multi-Format Export
- 🆕 Import from URL: paste any public web page URL in the dashboard — the page content is fetched server-side and converted to a well-formatted Markdown note (headers, bold, tables, links, code blocks, images)
- 🆕 Export to HTML: download a self-contained HTML file of your note from the note settings panel (gear icon)
- 🆕 Export to PDF: open a print-preview page and save as PDF via your browser's built-in print dialog
- 🔧 Download .md button (status bar) now consistently uses the same Blob-download logic as the settings panel export
2026/05/26
User Profile Note, Security & Performance
- 🆕 Logout all devices: new feature in Account Settings → Security — instantly invalidates all active sessions across every browser/device
- 🆕 User profile note: select any public note as your profile — it is served at /@username
- 🆕 Profile note badge (🏠) shown on the note card in the dashboard (grid and list views)
- 🔧 Security: SMTP credentials and config moved to environment variables — no secrets in source
- 🔧 Security: OTP rate limiting — max 1 code per 60s, max 5 per hour per email
- 🔧 Security: OTP brute-force protection — locks out after 5 failed verification attempts
- 🔧 Security: global error handler — internal details no longer leaked on failures
- 🔧 Security: headers (nosniff, X-Frame-Options, Referrer-Policy, Permissions-Policy) added to built-in server router
- 🔧 Performance: database schema migration now cached — skips all checks after first boot
- 🔧 Performance: SQLite tuned with WAL auto-checkpoint, 8 MB page cache, 32 MB mmap
- 🔧 Performance: admin panel queries optimised (correlated subquery → JOIN, email blocklist → indexed lookup)
- 🔧 Performance: generate_hash() now single bin2hex(random_bytes()) call instead of per-char loop
- 🔧 Admin: IP geolocation lookup moved server-side — no more mixed-content warnings on HTTPS
2026/05/25
Account Deletion Flow & 60-Day Sessions
- 🔧 Account deletion: users can now log in during the 30-day grace period — a modal prompts them to cancel deletion or continue to dashboard
- 🔧 Accounts whose deletion deadline has passed are automatically purged
- 🔧 Login sessions now persist for 60 days — users only need to re-login after 60 days of inactivity
2026/05/24
Real-Time Collaboration, Mobile Optimisation & User Controls
- 🆕 Real-time multi-user collaboration: open the same note in multiple tabs or share with others — changes sync automatically every 2 seconds
- 🆕 3-way line merge: edits to different lines auto-merge silently; only same-line conflicts are flagged
- 🆕 Live indicator in status bar shows when a note is in live-sync mode
- 🆕 Block User: block another user — both parties can no longer view each other's notes or invite each other to shares; existing shares removed automatically
- 🆕 Do Not Disturb mode: hide your account from note invite searches (existing shares unaffected)
- 🆕 User Timezone setting: auto-detected on registration, editable in Account Settings
- 🆕 User Font Settings: choose separate fonts for the editor and preview/reading pane
- 🆕 Guest Note Remember: returning guests are prompted to resume their previous note or start fresh
- 🆕 Claim Guest Note: logged-in users can claim any anonymous guest note as their own with one click
- 🔧 Mobile nav: save-status, username, copy-link, and split-view button collapse to icons-only on small screens
- 🔧 Dashboard: header stacks vertically on mobile; secondary buttons (Purge / Import) show icons only
- 🔧 Search bar fills full width on mobile instead of capping at 360px
- 🔧 Modals slide up as bottom-sheets on mobile with safe-area inset support
- 🔧 Editor side-padding and status-bar padding reduced on phones
2026/05/23
Note Sharing & Permission System
- 🆕 Three-tier permission model for public notes: View only / Edit with link / Specific users
- 🆕 Private notes support invite-only access (Specific users)
- 🆕 Invite collaborators by @username or email from the note settings panel
- 🆕 Edit with link: anyone with the URL (including guests) can edit
- 🆕 Specific users (public): all visitors can preview; only invited users can edit
- 🆕 Specific users (private): only invited users can view and edit
- 🆕 Shared with me tab on dashboard — shows notes others have invited you to
- 🆕 Shared with me supports grid and list view toggle
- 🔧 View only: interactive editor and editor/split buttons hidden for non-owners
- 🔧 Switching note to private auto-selects Specific users permission
- 🔧 Dashboard: My Notes / Shared with me tabs no longer conflict with grid/list toggle
- 🔧 Dashboard container now consistent width across all views and tabs
2026/05/22
Auto-Tags, Hashtag Rendering, Security & Bug Fixes
- 🆕 Auto-tag detection: write #hashtags in your note — first 5 become tags automatically
- 🆕 Inline #hashtag styling in editor and preview (accent-colored pill badges)
- 🆕 Interactive editor mode: markdown renders inline, only the current line stays raw
- 🆕 Export notes as .md files (download button in dashboard)
- 🆕 Import multiple .md files directly into your dashboard
- 🆕 Purge all empty notes from dashboard with one click
- 🆕 Dashboard: Grid / List view toggle (persisted per browser)
- 🔧 Nav bar: Actions now always right-aligned on all pages
- 🔧 Dashboard footer pinned to bottom of viewport on all pages
- 🔧 CSS/JS cache-busting with version query string
- 🔧 Interactive mode: empty note auto-focuses for instant typing
- 🔧 Interactive mode: screen auto-scrolls with cursor when typing at bottom
- 🔧 Always paste as plain text in editor and interactive mode
2026/05/21
User Settings & Bug Fixes
- 🆕 Account Settings: Change username, email, password, default note visibility
- 🆕 Account Settings: 30-day account deletion with cancel option
- 🔧 Fixed: Sign in / Register modal tab switching and close button
- 🔧 Fixed: Logo now links to dashboard when logged in
- 🔧 Fixed: Note title saving now works correctly
- 🔧 Fixed: Default note visibility (public/private) now applies to new notes
- 🔧 Fixed: Account settings page allow default visible