Privacy notice

Noduo does not require an account, name, phone number, or contact list. The secret phrase stays on your device. Your browser derives a verification value and encryption key from it; message content is encrypted before upload.

To operate sessions, we process random session and participant identifiers, encrypted message data, encrypted photo files where photo sharing is enabled, delivery and expiry timestamps, rate-limit fingerprints, session settings, and short-lived authentication tokens.

Stripe Managed Payments is the merchant of record for paid sessions. Stripe collects the email, payment, billing, country, tax, and fraud-prevention information needed for checkout. If you opt in, Stripe may save your payment method for future purchases.

Noduo receives a transaction identifier, selected amount, payment status, and selected session lifetime and feature options. Noduo does not receive or store full card details, the checkout email, or billing address. No secret phrase or message content is sent to Stripe.

On public pages only, Noduo uses Umami Cloud to measure aggregate page views, campaign sources, and a small number of conversion events such as checkout started, payment confirmed, photo add-on selected, and session created. Event properties are limited to a plan, lifetime category, or feature selection.

Umami does not set analytics cookies. Noduo also respects supported browser privacy signals. No analytics page views or events are sent from translator or private-session URLs. Noduo session identifiers, secret phrases, message content, payment identifiers, and checkout email are never sent to Umami.

• Supabase provides database storage and related infrastructure.
• Vercel hosts the application and processes normal web request information.
• Stripe Managed Payments processes payments as merchant of record.
• Umami Cloud provides cookieless aggregate analytics for public pages.

These providers process information under their own terms and privacy notices and may process data in countries other than yours.

A message’s selected expiry period starts when the other participant first opens it. Unread encrypted messages remain until the conversation expires; a conversation without automatic expiry can therefore retain unread messages without a set expiry. Private views lock after five minutes without interaction. Authentication and rate-limit records are short-lived.

Where photo sharing is enabled, photos are resized and re-encoded in the browser to remove embedded metadata, then encrypted before upload. The encrypted storage object is queued for deletion when its message is deleted. Noduo’s infrastructure can observe technical metadata such as encrypted file size and transfer time, but not the photo content. Infinite sessions retain an unread photo for no more than 90 days.

Payment entitlement records are retained only as needed to prevent reuse, handle refunds, maintain financial records, and resolve disputes. Stripe retains payment records according to its legal and operational obligations. Aggregate Umami analytics are retained according to the analytics plan’s reporting window.

Noduo uses essential browser storage and cookies to maintain session access, remember the pending payment claim in the same browser, and preserve selected checkout settings. We do not use advertising cookies.

You can avoid paid checkout by using a free lifetime, decline Stripe’s payment-method saving option, close a session, and allow temporary data to expire. Depending on where you live, you may have legal rights concerning access, correction, deletion, restriction, or objection.

Because Noduo has no accounts and intentionally stores little identifying information, we may be unable to associate a session with you without identifiers you provide.

We use encryption and access controls designed to reduce exposure, but no service can guarantee absolute security. See the privacy and security notes for practical limitations.

Privacy questions and requests may be sent to support@noduo.app.