privacy

last updated 30 august 2026

the short version. we hold your email, your password (as a hash we cannot reverse), your date of birth, and the nvm's you write. released cards carry no name and nothing that points back to you. we do not sell anything, and there is no advertising or third-party tracking in the app.

what we hold, and why

• email — to identify your account and send you a reset link. lawful basis: performance of a contract.
• password — stored as an argon2id hash. we never see the password itself.
• date of birth — solely to enforce a minimum age. never displayed to anyone.
• your nvm's — kept ones are visible only to you. released ones are shown to other people with no author attached.
• votes and blocks — so the felt does not show you the same card twice, and so a blocked author stays hidden. a blocked person is never told they were blocked.
• reports — so a person can review a card.
• technical logs — ip address and request timing, to stop abuse. lawful basis: legitimate interest.

anonymity

a released card carries no name, no handle, and no identifier of any kind. this is enforced in one place in our code — the function that turns an nvm into something another person can see simply has no author field to leak.

blocking works without breaking that. when you block whoever wrote a card, your app never learns who they are: it asks our server to block the author of that specific card, and the server resolves it. neither of you is told anything about the other.

who else sees it

our hosting provider, and an email provider for the two transactional emails we send. no advertiser, no data broker, and no analytics that follows you between apps.

how long we keep it

nvm's — kept or released — stay until you destroy them or delete your account. that is the criterion: nothing you wrote is removed on a timer, and nothing you wrote is kept once you say otherwise.

destroying an nvm erases its text immediately. the empty record left behind exists only so other people's votes stay valid, and it is purged within 30 days.

resolved reports are kept for 12 months. sessions expire in 30 days, and expired tokens are purged on a schedule. request logs, which include your ip address, are kept for 30 days. deleting your account removes the account, the vault and the credentials at once.

your rights

you can export everything we hold as a single file, and delete your account, both from settings inside the app. neither goes through us, and neither takes longer than a moment.

you can also correct your email, ask what we hold, object to processing, or complain to your data protection authority. write to privacy@getnvm.app.

children

nvm is not for anyone under 16, and we ask for a date of birth to enforce that.

changes

if this notice changes in a way that affects you, we will say so in the app rather than quietly re-dating the page.