Privacy policy

Last updated: May 5, 2026

In short

Nudge stores only what's necessary to function: your email to sign in, and the tasks you create. No advertising tracking, no third-party cookies, no data resale. You can delete your account and all your data at any time from the settings, in one click.

Data controller

The data controller is X37A, an individual residing in France and editor of the site. For any question or request about your data: alexves.tech@pm.me.

What data is collected

Email address — provided when you create an account. Used to authenticate you and send you technical emails (signup confirmation, password reset).
Password — stored hashed by our authentication provider Supabase. It is never stored in plain text and is not accessible to anyone, including the editor.
Tasks you create (title, importance, urgency, energy, due date, recurrence, status). Visible only to you.
Preferences (interface theme, daily goal, reminder settings, language).
Daily activity counters (number of completed tasks) used to display the activity heatmap.
Push notification subscriptions (encrypted browser/device token) if you enable reminders. No additional personal information is attached to this subscription.
Anonymized JavaScript errors in case of bugs — captured by Sentry (EU) to enable fixes. These reports contain the URL, the error stack, the browser used, and an anonymous user identifier. They do not contain the content of your tasks.

No third-party cookies are set. The site uses only the browser's localStorage to keep your session and local preferences (theme, language). No advertising or tracking tool (Google Analytics, Meta Pixel, etc.) is integrated.

Why this data is collected

To let you use Nudge: authentication, task persistence across devices.
To send the reminders you schedule via push notifications.
To improve reliability by detecting client-side bugs.

The legal basis is contract performance with you upon account creation (GDPR, art. 6.1.b), for data strictly necessary to the service. Sentry error monitoring relies on the editor's legitimate interest in maintaining a reliable service (GDPR, art. 6.1.f).

Where your data is stored

Database and authentication: Supabase, instance hosted in Frankfurt (Germany, European Union).
Frontend and application server: Vercel (USA with global edge CDN). No personal data flows through it; the application code is served statically.
Error monitoring: Sentry GmbH, European instance (Germany).
Transactional emails: Resend (USA). Only your email address transits through Resend, for the time of sending.

Data transfers to the United States (Vercel, Resend) are framed by the European Commission's Standard Contractual Clauses and the Data Privacy Framework.

How long your data is kept

Your data is kept as long as your account is active. If you delete your account from Nudge's settings ("Danger zone" → "Delete my account"), all your data — tasks, preferences, push subscriptions, activity statistics — is immediately and irreversibly wiped from Supabase's servers. Sentry error reports are kept for 90 days then automatically purged.

Supabase automatic backups are kept for 7 days on the current plan. Deleted data disappears permanently within this window.

Your rights

Under the General Data Protection Regulation (GDPR) and the French "Informatique et Libertés" law, you have the following rights over your data:

Access — to know what data concerning you is processed.
Rectification — to correct inaccurate data.
Erasure (right to be forgotten) — to permanently delete your account and all associated data. Doable directly from Nudge's settings.
Portability — to receive a copy of your data in a structured format.
Objection — to object to processing, within the limits of data strictly necessary to operate the service.
Restriction — to request a temporary freeze on processing.

To exercise any of these rights, write to alexves.tech@pm.me. A response will be provided within a maximum of one month.

Complaint

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL): cnil.fr/en/plaintes.

Policy updates

This policy may evolve as Nudge adds new features or changes technical providers. The last update date is shown at the top of this page. In case of substantial changes, you will be notified by email.