Privacy Policy
Short version: we store what Nagbird needs to remind you, nothing more. No ads, no tracking, no selling data. You can download everything or delete your account at any time.
What we store
- Your account: name, email address, and your password scrambled with scrypt (we never see or store the password itself).
- Your reminders: titles, notes, dates, times, repeat rules, and whether you've done, snoozed or dismissed them.
- Your settings: time zone, 12/24-hour clock, tone, nag level, quiet hours and similar choices.
- Login sessions: a random code in one cookie (
nb_session) that keeps you logged in for up to 30 days. We store only a scrambled version of it. This is the only cookie Nagbird sets. - The day you last used the app (just the date), so the admin page can count how many people are active. Admins only ever see totals, never who.
- Webhooks and push notifications you turn on: the addresses you give us, and for push, the address your browser's push service gives us for this device.
- Shared lists you create or join: the list's name, who's in it, and its reminders. People in a list see your name and that list's reminders, and nothing else of yours. If you invite someone by email, we use their address only to send that invite.
To work offline, the app keeps a copy of your reminders on your device (in the browser). Logging out removes it.
We don't store your IP address. We use it briefly in memory to stop password guessing, then forget it.
What we don't do
- No advertising, analytics or tracking scripts, and no third-party cookies.
- We don't sell, rent or share your data for marketing.
- We don't read your reminders. The only exceptions: when you ask us for help with something specific, or when the law or keeping the service safe and running requires it.
Who else handles data
Nagbird runs on our own server. A few services sit in between, each only for its job:
- Cloudflare carries all traffic to nagbird.com (it sees your IP address and the pages you load, like any network provider), and stores our off-site backups.
- Resend delivers account emails (confirming your address, resetting your password), so it receives your email address and that email's content.
- Your browser's push service (Google, Apple, Mozilla or Microsoft, depending on your browser) delivers push notifications if you turn them on. Each message is encrypted so only your device can read it.
- Apps you connect with webhooks (for example Discord or Slack) receive the reminder details you chose to send them. Their own privacy policies apply there.
- Google Fonts serves the fonts the pages use, so your browser requests them from Google.
How long we keep it
- While your account exists, we keep your data so the app works. Completed reminders stay until you delete them or your account.
- Unconfirmed sign-up and password-reset links expire within 24 hours and 1 hour.
- Backups: daily copies are kept for 7 days, and the off-site copy keeps 7 days of history. After you delete your account, your data disappears from backups within about a week.
Your choices
- Download your data: Settings → Your data → Download my data gives you everything above in one file.
- Correct it: change your name and settings in Settings, and edit or delete any reminder.
- Delete it: Settings → Delete account removes your account, reminders, webhooks and devices immediately (backups roll off as described above). Lists you own are deleted too; reminders you added to other people's lists stay with that list.
- Turn things off: push notifications, webhooks and quiet hours are all in Settings.
Security
Connections are encrypted (HTTPS). Passwords are scrambled with scrypt, login codes and one-time links are stored scrambled, and logins are rate-limited. No system is perfect; if something goes wrong that affects your data, we'll tell you.
Children
Nagbird isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, contact us and we'll delete the account.
Changes
If we change this policy in a way that matters, we'll update the date above and tell you in the app or by email before it takes effect.
Contact
Questions or requests: [email protected].