Privacy Policy

Last updated: [DATE]

1. Who we are

ND ("ND", "we", "us") is a global chat and portfolio platform for designers, operated by [COMPANY LEGAL NAME] of [REGISTERED ADDRESS]. For any privacy question you can reach us at [PRIVACY CONTACT EMAIL]. We are the data controller for the personal data described below.

2. Data we collect

Account & identity

Sign-in is handled by Firebase Authentication (Google). When you register we receive and store your email address and a Firebase account identifier. If you sign in with Google, Firebase also provides basic profile information from your Google account. We never see or store your password.

Profile you create

The details you choose to add to your profile: display name, @handle, city, country, languages, design skills, a short bio, and an avatar image.

Content you post

Portfolio works (titles, descriptions and the images you upload) and the messages you send in direct, group and channel chats.

Safety & moderation

Blocks, reports you file, and any moderation actions (reports about you, bans) needed to keep a public community safe.

Technical data

To operate and protect the service we process limited technical data, including your IP address (used transiently for rate-limiting and abuse prevention), and server logs and error reports about requests and failures.

3. How we use it

• To provide the platform: your account, profile, portfolio and chats.
• To keep the community safe: moderation, blocking, reports and bans.
• To protect the service: rate-limiting, security and abuse prevention.
• To diagnose and fix problems via logs and error tracking.
• To contact you about your account or important service changes.

We do not sell your personal data, and we do not use it for advertising.

4. Legal bases (GDPR)

• Contract — to provide the service you signed up for.
• Legitimate interests — to secure the platform, prevent abuse, and keep the community safe, balanced against your rights.
• Consent — where we ask for it (e.g. optional features); you can withdraw it at any time.
• Legal obligation — where the law requires us to keep or disclose data.

5. Who we share it with

We use a small number of processors who handle data on our behalf:

• Google Firebase Authentication — identity and sign-in.
• Cloudflare R2 — storage for uploaded images.
• Render — hosting for the app and database.
• Sentry — error tracking (configured not to send personal identifiers such as tokens or emails).

We may also disclose data where legally required, or to protect the rights and safety of our users. Public parts of your profile and portfolio, and the messages you send into shared chats, are visible to other users by design.

6. International transfers

ND is a global service and our providers may process data outside your country, including in the [UNITED STATES / OTHER]. Where required, such transfers rely on appropriate safeguards (for example the EU Standard Contractual Clauses).

7. Retention

We keep your account data for as long as your account exists. When you delete your account we delete your identity and profile (see §9). Some content, such as messages already delivered into a shared conversation, may be retained in de-identified form so group conversations remain coherent for other participants. We keep security logs for a limited period.

8. Your rights

Depending on where you live (including under the GDPR) you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data ("right to be forgotten");
• restrict or object to certain processing;
• receive a copy of your data in a portable format;
• withdraw consent where processing is based on it.

To exercise any of these, contact us at [PRIVACY CONTACT EMAIL]. You also have the right to complain to your local data protection authority.

9. Deleting your account

You can delete your account at any time from Edit profile → Delete account on your profile page. Deleting your account:

• permanently deletes your identity from our authentication provider (Firebase), so you can no longer sign in;
• removes your profile, and detaches your account from your content;
• takes effect immediately — existing sessions stop working.

As noted in §7, messages already sent into shared conversations may remain in de-identified form. If you need a full erasure beyond this, contact us.

10. Cookies & local storage

ND does not use advertising or tracking cookies. We use your browser's local storage to remember that you are signed in (so pages load in the right state) and Firebase uses its own storage to keep your session. Clearing site data signs you out.

11. Children

ND is not intended for children under [16]. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes

We may update this policy. When we make material changes we will update the date above and, where appropriate, notify you in the app.

13. Contact

Questions or requests: [PRIVACY CONTACT EMAIL], [COMPANY LEGAL NAME], [REGISTERED ADDRESS].