Your data, simply.

Who is responsible

Mattbuilds is responsible for processing and protecting personal information, and can be reached at contact@nodmi.fyi.

If you have an account

Nodmi keeps your email address. If you sign in with Google or GitHub, it also receives your name and your account identifier with that provider, only after you agree. Nodmi never receives your password.

For your projects, Nodmi keeps their name, your website address and the widget settings.

If you answer a widget

No account is needed. Nodmi records the chosen answer, the optional comment, the page address without its parameters and the date, then passes them to the website owner, who decides how they are used.

A comment is read by the website owner: avoid writing personal information in it.

Technical data

To limit abuse, Nodmi computes a fingerprint of your IP address. The address itself is never stored, and the fingerprint is deleted within two days.

The email sign in form uses Turnstile, from Cloudflare, to tell people from bots.

Cookies

The nodmi_session cookie keeps you signed in; it expires after 30 days without activity. The nodmi_oauth cookie protects a Google or GitHub sign in and disappears after ten minutes.

Nodmi uses no advertising or analytics cookies. The widget installed on a website sets no cookie, and the demo keeps its tries in your browser.

Service providers

Cloudflare hosts the website, the API and the database. Resend sends the sign in emails. Google and GitHub are involved only if you choose to sign in with them.

These providers may process information outside Québec, notably in the United States, only to run Nodmi.

How long data is kept

Session: 30 days without activity. Sign in link: 15 minutes, and a single use.

Feedback: until the project owner deletes it, with at most 1,000 responses per project. An inactive project is deleted with its feedback: after 30 days if it received none, after 90 days otherwise.

Account: until you ask for its deletion.

Your rights

You can ask to access your information, correct it, delete it or receive a copy in a common format, and withdraw your consent, by writing to contact@nodmi.fyi. You will get an answer within 30 days. You can also delete your projects and feedback directly from your workspace.

If you disagree with the answer, you can contact the Commission d’accès à l’information du Québec. If you live in the European Union, the GDPR gives you the same rights with your country’s data protection authority.

Security

Exchanges are encrypted (HTTPS). Session tokens and sign in links are only stored as fingerprints, and each project is only accessible to its owner.

Changes

This page will evolve with Nodmi. The date at the top shows its last update.