Privacy Policy
Last updated 2026-11-01
The short version
My Company Ltd collects the minimum needed to run NORANDEL: who you are, what you've paid for, and how the app is being used. We don't sell your data, we don't run ad trackers, and you can have the whole account deleted by asking.
What we collect
Account data. When you sign in with Google, we receive and store your verified email address, display name, and avatar URL. We never receive your password for that provider.
Usage data. Pages visited, features used, and errors encountered, tied to your account ID so we can debug a problem you report.
Content. Whatever you create in the app.
Why we're allowed to
We process account data to provide the service you were invited to. We process usage data on the basis of legitimate interest in keeping the product working and understanding how it's used — a balance we've weighed against your privacy, which is why analytics are pseudonymous and never shared with advertisers.
Who else touches it
These are the only third parties involved, and each is bound to use the data solely to provide their service to us:
| Service | Purpose | What they see |
|---|---|---|
| Cloudflare | Hosting, database, file storage, CDN, and cookieless page-load analytics | Everything the app stores, plus request logs and page-load timings |
| PostHog | Product analytics and error reporting | Pages visited, actions taken, and error traces |
| Resend | Transactional email delivery | Your email address and the message content |
Cookies
One cookie holds your sealed, encrypted session — it's what keeps you signed in, and the app doesn't work without it. A short-lived cookie also remembers which page you were heading to when you signed in. Analytics use first-party storage served from our own domain. We don't set advertising or cross-site tracking cookies.
How long we keep it
Account and content data lives until you delete your account. Analytics events age out on the provider's retention schedule.
Your rights
You can download a copy of your data or delete your account and its contents yourself, any time, from your account page — no waiting on a reply. For correction of anything wrong, or anything else, email support@example.com and we'll action it within 30 days. If you're in the UK, EU, or a similar jurisdiction, you also have the right to complain to your data protection authority.
Security and breaches
Data is encrypted in transit and at rest, sessions are sealed cookies, and access to production is limited to people who need it. If a breach affects your data, we'll tell you and the relevant regulator as the law requires.
Contact
My Company Ltd — support@example.com