01What we collect
When you use NoBS, we collect:
- Account information — your email address and a hashed password when you sign up.
- Brief content — the briefs you upload or paste for translation. This includes both the raw text and any files you attach.
- Usage data — which features you use, how often, and basic analytics about your sessions (page views, click events).
- Device information — browser type, operating system, IP address, and similar technical metadata.
02How we use it
We use this information to:
- Operate the service and translate the briefs you submit.
- Improve our AI models using aggregated, anonymized brief patterns. We never use your specific brief content as a training example without explicit consent.
- Communicate with you about your account, updates, and service announcements.
- Detect and prevent abuse, fraud, and violations of our Terms.
03What we don't do
We don't sell your data. We don't share your brief content with advertisers. We don't use your identifiable information to train third-party models. We don't track you across other websites.
04Third parties
We use a small number of third-party services to operate NoBS: hosting (Vercel), data storage (Upstash Redis), AI processing (Google Gemini for the Translator agent), and payment processing for donations. Each of these processes data on our behalf under their own privacy policies. We do not share your data with these services beyond what's needed to operate the service.
05Cookies & local storage
We don't use third-party advertising cookies. We don't track you across other websites. Everything NoBS stores on your device falls into one of three categories, listed in full below. You can clear it all from your browser settings at any time, and the cookie banner lets you opt out of the two non-essential categories without leaving the site.
Necessary — required for the service to work. Set when you sign in or use core features. No opt-out, because without these you can't sign in or save a brief.
- nobs_auth, nobs_user_email, nobs_user_record — your sign-in state and account profile. Without these you're signed out.
- nobs_consent_log, nobs_cookie_consent — an audit trail of your consent decisions (when you accepted the Terms, what you chose in the cookie banner, when you re-accepted after editing your profile). We keep this because regulators may ask us to prove you consented; we'd rather have the receipt than guess.
- brief:* keys (one per project and version) — the briefs you've uploaded and the translated outputs we've generated for them. This is your work, kept locally in Phase 1 so the service runs without a database.
- user:{your-id}:stats — lifetime counters (how many briefs you've translated). Used to render your timeline and Job Done report.
- bug:submissions:*, contact:submissions:* — copies of any bug reports or contact-form submissions you've sent us, so you have a local record.
Functional — opt-in — improves the experience but isn't required. Off by default until you accept in the cookie banner.
- arcade:{your-email}:high_score, arcade:{your-email}:last_score, arcade:{your-email}:muted — your scores and mute preference in the Brief Toss arcade. If you don't play the arcade, these never get written.
- Legacy nobs_arcade_high_score, nobs_arcade_last_score, nobs_arcade_muted — older global versions of the above. Migrated to the per-account keys on first sign-in; kept around briefly so we don't wipe scores from people who played before signing in.
Analytics — opt-in — helps us understand how the product is used. Off by default until you accept in the cookie banner.
- nobs_session_id (sessionStorage, cleared when you close the tab) — a random ID that groups your page views into one session for usage analytics. No personal info; gone the moment you close the tab.
Retention: everything in the Necessary category is kept until you delete your account, at which point it's purged within 30 days (except items we're legally required to keep, like consent audit logs). Functional and Analytics keys are kept until you clear your browser storage or revoke consent in the cookie banner.
06Your rights
You have the right to:
- Access the data we have about you.
- Correct any inaccurate information.
- Delete your account and associated data at any time from your account settings.
- Export your briefs in a portable format.
- Object to or restrict certain processing of your data.
07Data retention
We retain your account data and briefs for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're required to retain it for legal compliance (e.g. transaction records for tax purposes).
08Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date and notify you via email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.
09Contact
Questions about privacy, or want to exercise your rights? Reach us through the contact page.