Privacy notice
Who is responsible
The controller for this website, the beta programme and the messages you send us through the contact form or the noapad app is NXTM Group sp. z o.o., ul. Terespolska 4 lok. 375, 03-813 Warszawa, Poland, KRS 0000763527, NIP 1132990632. Questions about your data: use the contact form.
What this website does not do
No cookies, no analytics, no advertising or tracking scripts. Fonts are served from this site, not from a third party. Your language choice is kept in your browser’s local storage and never sent to us.
Hosting
The site and its forms run on our own server, without a CDN or any other third-party service. To deliver pages, the web server processes technical data such as your IP address and browser type. Its access log records requests without IP addresses; its error log may contain an address and is deleted after 14 days. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
Beta request form
If you request beta access, we store your email address, platform, the file types you selected, your optional note, the page language and the time of the request. We use them only to send you beta builds and ask how it went. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us through the contact form. The data is stored in a database on our server and deleted when the beta ends or when you ask, whichever comes first. No newsletter, no marketing.
To stop abuse, the form counts requests per IP address. We keep only a one-way hash of the address, for at most one hour.
Contact form and feedback from the app
When you write to us through the contact form or send a report or idea from the noapad app, we store your message, the topic you chose, your e-mail address if you give one, the language and the time — and, from the app, the app version and operating system it sends with the report. We also keep a one-way, salted hash of your IP address to spot abuse; never the address itself. We use this only to read and answer your message and to fix and improve noapad. Legal basis: your consent for the contact form (Art. 6(1)(a) GDPR) and our legitimate interest in answering reports and fixing problems (Art. 6(1)(f) GDPR). The data is stored in a database on our server and deleted once your message is dealt with, at the latest after 24 months, or sooner when you ask. The forms and the app’s reports are protected against spam by a small proof-of-work check computed on your device, a hidden field that only bots fill in and a per-IP request limit — no CAPTCHA and no third-party service. Cloudflare Turnstile, a third-party bot check, is switched off; if we ever turn it on, we will update this notice before it takes effect.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent. You can also complain to a data protection supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO).