privacy

who runs this

No Alternative is run by an individual (a natural person), the data controller for the purposes of the GDPR. For any question about your data, or to exercise the rights below, write to [contact email].

what we collect

We keep as little as the service needs to work.

• your email — only if you create an account. It identifies the account and lets you sign in, reset your password, and receive confirmation links.
• your content — the tasks you write, the focus sessions you record, and your entry phrase.
• technical data — our hosting and network providers process the standard request information (including your IP address) needed to serve the pages and keep them secure.

why we’re allowed to

We process your content and account to provide the service you asked for — that is the performance of a contract with you. Creating an account, and the email that comes with it, rests on your consent, given when you tick the box at sign-up. You can withdraw it at any time by deleting your account.

using it without an account

You can use the timer without signing up. In that case you are given a random anonymous identifier — no email, no name. Your tasks and sessions are tied to that identifier alone. If you later create an account, that data is merged into it. If you never sign in, the data stays attached to the anonymous identifier and is removed when the account is deleted.

who else touches your data

We don’t sell your data or share it for advertising. We rely on a few processors to run the service:

• Supabase — authentication and database (your account, tasks and sessions are stored here). Region: [confirm Supabase region]. If it is outside the EU, the transfer is covered by the European Commission’s Standard Contractual Clauses.
• Vercel — hosting. Serves the application and processes request logs.
• Cloudflare — DNS for our domain, and the network path your requests take to reach us.

cookies

We use only the essential cookies that keep you signed in. There is no analytics, no advertising, and no third-party tracking — so there is no consent banner to click through. If that ever changes, we will ask for your consent first.

how long we keep it

We keep your data until you delete your account. There is no automatic purge. When you delete your account, your profile, tasks and sessions are erased.

your rights

Under the GDPR you can access, correct, export and erase your data, and object to or restrict its processing. Two of these are built in:

• export — download everything as a JSON file from settings, at any time.
• erasure — delete your account from settings; it takes effect immediately.

For anything else, write to [contact email]. You also have the right to complain to your local data protection authority.

age

No Alternative is intended for people aged 16 and over. If you are younger, please don’t create an account.

changes

If this policy changes, the date at the top changes with it. Material changes will be made clear before they take effect.