THE SHORT VERSION
NudgeLink uses a random public address, has no visitor chat or free-text message box, hides visitor identity from owners and keeps search indexing off unless an owner deliberately enables it.
1. What NudgeLink does
NudgeLink lets an owner publish a temporary status page and receive preset, one-way alerts. Visitors can open a page through a URL, QR code or NFC tag without creating an account. NudgeLink does not provide chat, replies or free-text visitor messages.
2. Information we process
We process the account and page information needed to provide the service: an Apple account subject hash or an email hash and masked display address; page titles, status, notices, schedules, links, search-indexing choice and theme choices; notification tokens; purchase entitlements; aggregate entry counts; and product activity. We may process a short-lived privacy-preserving hash derived from limited network and browser signals to rate-limit alerts, prevent abuse and handle reports.
3. Information we do not seek
We do not request continuous location, contacts or a social graph. We do not reveal a visitor identity, IP address or source marker to a page owner. We do not sell personal information or use public page visits to build advertising profiles. Do not place phone numbers, home addresses, vehicle registration numbers or other sensitive information in public page content.
4. Public pages and search engines
A random Link Page works for anyone who has its address. Search indexing is disabled by default. When an owner explicitly enables indexing, the page may be listed in the NudgeX sitemap and discovered, cached or displayed by independent search engines. Turning indexing off restores noindex directives and removes the page from our sitemap, but third-party search caches can take time to update.
5. Service providers and purchases
Cloudflare hosts public pages, APIs and service data. Expo supports mobile notification delivery. RevenueCat and Apple process theme purchase status. Apple handles payment details; NudgeLink does not receive full card information. These providers process data under their own terms and privacy notices.
6. Retention and deletion
Product activity is retained for up to 30 days. Verification codes expire after 10 minutes. Deleting an account disables its public page immediately and schedules remaining account records for deletion within 7 days. Security, fraud-prevention and legal records may be retained separately only for as long as reasonably necessary for those purposes.
7. Your choices
You can sign in with Apple or passwordless email, disable notifications, pause or delete a page, disable search indexing, clear product activity, export account data and delete the account from Settings. Disabling notifications keeps status-only pages available but disables visitor alert actions.
8. Safety and children
NudgeLink is not an emergency service. Contact local emergency services when anyone is in immediate danger. The service is not directed to children under 13, and children should not create or manage public pages.
9. Contact and changes
For privacy questions or requests, contact 2winter.dev@gmail.com. We may update this policy as the service changes and will publish the effective date on this page.
Privacy contact · 2winter.dev@gmail.com