Privacy Policy

Last updated: June 12, 2026

NounDesk ("we", "us") provides a service that lets website owners create and display notifications, banners, and popups on their websites. This policy explains what data we collect, why we collect it, and the choices you have. We've tried to keep it in plain English.

Data we collect from account holders

• Account information — your email address and name (if provided), used to create and secure your account. Authentication is handled by Supabase.
• Campaign content — the notifications, banners, and popups you create, including any text, links, and media URLs you add.
• Website details — the domains you register so the widget knows where to display your campaigns.
• Usage data — basic product analytics so we can understand which features are used and improve the product.

Data we collect from visitors to your website

When the NounDesk widget runs on a customer's website, it records aggregate analytics events so the customer can measure campaign performance:

• Impressions, views, clicks, dismissals, and conversions for each campaign.
• A randomly generated visitor identifier stored in the browser (no name, email, or account profile is ever associated with it).
• Coarse context for reporting: device type (desktop / mobile / tablet) and the page URL where the campaign appeared.

The widget does not use third-party advertising trackers, does not fingerprint devices, and does not sell visitor data to anyone.

Consent mode (GDPR)

The widget supports a consent mode for websites subject to GDPR and similar laws. When consent mode is enabled by the website owner, the widget does not store a visitor identifier or send analytics events until the visitor has given consent through the site's consent mechanism. Website owners are responsible for configuring consent mode appropriately for their audience and jurisdiction.

Where your data lives

• Database — hosted on Neon (PostgreSQL).
• Authentication — handled by Supabase.
• Application hosting & CDN — Vercel.

These providers act as data processors on our behalf and maintain their own security and compliance programs.

How long we keep data

We keep your account data and campaign content for as long as your account is active. Analytics events are kept so you can view historical campaign performance. If you want your account and its data deleted, contact us and we'll remove it.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you. To exercise any of these rights, email us and we'll respond promptly.

Cookies and local storage

The NounDesk dashboard uses cookies strictly for authentication (keeping you signed in). The widget uses browser storage on customer websites only to remember things like "this visitor dismissed this banner" and frequency caps — not for cross-site tracking.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify account holders by email.

Contact

Questions about privacy? Email us at support@noundesk.com.