Privacy policy
Last updated
The short version: we keep what we need to run your account and show what you post, we don't track you, and your data is yours to take or delete.
NogLog is run by Parlette Studios, the personal brand of the independent developer who built it, based in Maryland, USA. Parlette Studios is not a company; when these pages say “we” or “us”, they mean that developer.
What we collect
- Your account: your email address, your password (stored only as a one-way hash, never the password itself) and your username.
- Profile details you choose to add: a display name, bio, location (free text) and avatar.
- What you post: logs (rating, notes, flavor tags, where you got the nog, photos), batches, recipes, nogs you submit, favorites, thumbs and any reports you send.
- People you block: who you blocked and when. Only you can see this list, and the people you block aren't told.
- Signed-in devices: for each sign-in we keep the IP address and the browser or device description, so you can see and end your sessions.
- Abuse prevention: short-lived counters keyed by IP address or email address that slow down spam and password guessing, and moderation records such as reports and warning signals.
- Server logs: each request's path, status, timing and, when you are signed in, your account id. They do not record IP addresses.
When you upload a photo, we remove its embedded metadata, including GPS location and camera details, before it is stored.
What is public
NogLog is a public logbook. Anyone, including search engines, can see your profile (username, display name, bio, location, avatar, when you joined and your season stats), your logs (including where you got the nog), your recipes and batches, and the nogs you add to the catalog.
Your favorites are private unless you switch them on in Settings. Your email address is never shown to anyone.
What we don't do
- No ads, no analytics, no tracking pixels, no third-party scripts and no fingerprinting.
- We don't sell your personal information or share it for advertising.
- No marketing email. We only email you about your account (verification, password and email changes, deletion) and about content you posted (a nog approved or rejected, a moderation notice).
Why we use it
We use your data to run your account, show what you post, send the emails above, keep NogLog safe from spam and abuse, and fix things when they break.
If you are in the EU or UK, the legal bases are: running the service you signed up for (your account and posts), our legitimate interest in keeping NogLog secure and free of abuse (sessions, counters, moderation records, logs and backups), and legal obligations where they apply.
Who helps us run NogLog
A few services process data on our behalf. Each only gets what it needs to do its job:
- Cloudflare: domain names, secure connections, caching and the firewall in front of the site; Cloudflare R2 stores photos and our database backups; Cloudflare Email Routing forwards mail sent to our noglog.app addresses.
- Postmark: sends NogLog's emails, so it sees your email address and the message.
- Contabo: rents us the server that runs NogLog and holds the database.
- Apple and Google: distribute the mobile apps. Their own privacy policies apply when you use their app stores.
We don't use a crash-reporting service today. If we add one (such as Sentry), it will be listed here before it is switched on.
These providers may process data in the United States and other countries where they operate.
How long we keep it
- Your account, profile and posts: until you delete them or your account.
- Signed-in sessions: until you sign out, after 7 days without use, or after 30 days at most.
- Abuse-prevention counters: up to one day.
- Moderation signals: 90 days after they are resolved.
- Server logs: 14 days.
- Photos: deleted with the post they belong to; uploads never attached to a post within 24 hours.
- Backups: 90 days. Deleted data can stay in a backup until that backup expires; backups are only used to recover from a failure.
- The admin audit log, the record of moderation and account actions: kept indefinitely. It refers to accounts by an internal id, not an email address. When an account is deleted, the record of that deletion keeps a one-way hash of the email address and the IP address and device used, so we can recognize repeat abuse.
Deleting your account
You can delete your account yourself, in Settings or on the web. Deletion is immediate, not after a 30-day wait. Your logs, batches, recipes, favorites, thumbs, blocks, reports, sessions and photos are removed, and nog averages are recalculated without you. Other people's batches of your recipes stay with them, showing only the recipe's name.
Nogs you submitted stay in the catalog, because they are shared knowledge rather than personal data; afterwards they are credited to NogLog. We send one email to confirm the deletion and then nothing else.
How it works, step by step: Delete your account
Your rights
Wherever you live, you can:
- Get a copy of your data: Settings has an export that downloads your profile, logs, batches, recipes, favorites and the people you've blocked as a file.
- Correct it: edit your profile and posts at any time, or report a nog to fix its details.
- Delete it: delete any post, or your whole account.
- Ask us anything about your data, or object to how we use it, by email. We answer within 30 days.
If you are in the EU or UK and think we got something wrong, you can also complain to your data protection authority.
Children
NogLog is not for children under 13, or under 16 in the EU and UK. If we learn that a child under that age has an account, we delete it. If you think a child has signed up, email us.
Security
Passwords are hashed with scrypt, every connection uses HTTPS, and the sign-in cookie can't be read by scripts on the page. No system is perfect; if we ever have a breach that affects your data, we will tell you.
Found a security problem? Write to security@noglog.app.
Changes to this policy
When this policy changes, the date at the top changes too and the change is listed here. If a change matters for how your data is used, we will say so on the site before it takes effect.
- October 16, 2026: added blocking. The people you block are kept with your account and included in your export.
- October 15, 2026: first version.
Contact
Questions about privacy or your data: privacy@noglog.app