privacy

in effect since october 19, 2026

we keep the minimum noback needs to work. we don't show ads, and we don't sell or share your data with anyone for ads.

what we keep

• your account: your username and your passkey's public key. the private key never leaves your device.
• google: if you sign in with google, your email and your google account id. nothing else.
• your apps: the files you publish, their versions and the data each app syncs.
• ip: we keep it as a hash (not the plain ip) to limit abuse and handle reports.
• logs: technical and audit logs (publishes, reports, takedowns) for security and to fix problems.

we also count anonymous usage steps (for example, whether a publish finished) with a per-tab id that is not linked to your account.

we don't use tracking cookies. just a session cookie so you stay signed in, and one that remembers your language.

who else is involved

• cloudflare: works as cdn and proxy; traffic goes through it.
• vultr: the servers where everything is stored, in brazil.
• google: only if you choose to sign in with google.

we may give data to an authority if the law requires it.

deleting your stuff

you can delete each app from "my apps" and export your apps and data from your account. to delete your whole account, write to us from your account at hola@noback.app and we delete it with everything in it. apps without an account delete themselves after 7 days.

contact

for any question about your data: hola@noback.app.

this is a translation. the spanish version is the original.