1. Our Privacy Philosophy
Notimator was built with a privacy-first, Zero-Knowledge architecture. We believe your data is your property, and we have intentionally designed our systems so that we cannot read your private notifications.
2. What Data We Collect
Account Information: When you register, we collect your email address to serve as your account identifier, and we securely store a cryptographic hash of your password.
Notification Payloads: Our servers temporarily route your notifications. However, these payloads are symmetrically encrypted on your device before they ever reach our servers. We do not have the encryption keys and possess zero technical ability to read the contents of your notifications.
Security & Operational Logs: We log standard web server information (Time, IP Address, URL accessed) to monitor system health and automatically prevent abuse (such as rate-limiting and geo-fencing). These logs are rotated and deleted automatically.
3. How We Use Cookies
We do not use third-party trackers, marketing scripts, or telemetry (like Google Analytics). The only cookies we issue are strictly necessary functional cookies used to securely maintain your login session and protect against Cross-Site Request Forgery (CSRF) attacks.
4. Data Retention
Encrypted notification payloads are temporarily stored in our database for routing purposes. They are automatically and permanently purged from our systems as part of our nightly maintenance routines once they expire or are dismissed.
5. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR) and similar privacy laws, you have the following rights regarding your data:
- Right to Access: You can view your registered devices, account status, and pending encrypted pushes at any time via your dashboard.
- Right to Rectification: You may update your account details at any time.
- Right to Erasure ("Right to be Forgotten"): You have the right to completely delete your account. Doing so will permanently wipe your user record, registered devices, and any remaining encrypted pushes from our database.
6. Contact
If you have any questions or wish to exercise your rights regarding your personal data, please contact the site administrator.