Nowline — Privacy notice

Last updated: 2026-10-10

Nowline is a calendar and stopwatch for planned time, run by one person. This page lists what it keeps about you, where, for how long, and how to have it deleted. It describes what the app does with what you give it, and how it is run.

Who to write to

gabrielcarballomda@gmail.com. Write from the email address of your account for anything that changes it.

What your account holds

• Your email address, stored in lower case. An address that is still unconfirmed 24 hours after the account was created can be taken by the next person who registers it, or who moves their account to it. It stays on this account until that happens — you can still sign in with it, and you can still confirm it — and only then is this account left with no address. It keeps its password hash, its sessions and its calendar.
• A bcrypt hash of your password — never the password itself.
• When the account was created, and when its address was confirmed.
• An identifier the database gives the account, which is what everything else above is filed under.

What your calendar holds

Your projects, your blocks and the times you tracked, so they can reach your other devices. They are stored on a server in Oracle Cloud, together with the account.

Deleting a project or a block removes what it held from the live database. What stays is a row with only its identifier, when it was last changed and when it was deleted, so your other devices can see that it is gone; that row is kept until the account is deleted. Deleting a whole block also deletes from the live database every day of it that had been saved there: the times you tracked on that day, a day you moved or resized, and a day you had marked deleted. Deleting one day of a block replaces that day's times with a row that says the day was deleted. Each row also carries the time the server saved it.

Sessions and email links

• One session per sign-in: a hash of its token, which account it belongs to, and the date it was created — never the token itself. Signing out removes that device's session; the rest stay until they are signed out, until the password is reset or changed, or until the account is deleted.
• The links Nowline emails you — to confirm an address, to reset a password, or to move the account to a new address — are stored as a hash of the link, which account it belongs to, what it is for, the address it was sent to, and when it expires. A reset link lasts one hour and is only emailed to an address that is already confirmed; the other two last 24 hours. A link is deleted when it expires, when it is used, or when a newer link for the same purpose is sent. Changing the password deletes any reset link that is still waiting. Confirming a move to a new address deletes every link of the account.

Abuse counters

To slow down guessing, Nowline counts attempts per email address, per account and per IP address. Each count is a number and the time its window started. Signing in is limited for 15 minutes; every other count is limited for an hour. A count that nothing else removes is deleted one hour after it was started; a sign-in that works deletes that address's count at once.

The server logs

The web server records the IP address and the page requested of every visit, and keeps that log for 14 days.

Each time a device syncs, the app's server writes a line in its own log: when, the id of the account, how many rows and how many bytes the device sent, how many rows it got back, and whether it downloaded the whole calendar. The line holds no project or block, and not the address the request came from. That log is kept for 14 days too.

Email

Each email Nowline sends goes through Zavu, which receives the address, the subject and the text in order to deliver it. Nowline emails a link to confirm an address, to reset a password, or to move the account to a new address. It also emails the previous address when that move happens, if the previous address was confirmed: the new address is shown as its first character and its domain. It emails you when your password is changed from inside the app, if your address is confirmed; that notice has no link. If an email cannot be sent, the server writes its subject and the reason into its own log, without the address.

Backups

The database is backed up once a day and each backup is kept for 14 days. Anything you delete stays in the backups made before the deletion, until those rotate out.

On your device

No cookies, and no analytics code in the app: the only measure of use is the sync log described above. The app keeps your blocks, your session and your zoom level on your device so that it works offline: in the browser's local storage when you use Nowline on the web, and in the Android app's own private storage when you use the app. Android copies that storage neither to its cloud backup nor to a new phone, and removing the app removes it. The session on the device is the sign-in token itself, kept with the id of the account it belongs to; the server keeps only a hash of the token. The device also keeps the list of changes it has not uploaded yet, and it can keep a spare copy of the calendar from before a replacement, a copy of a save that could not be read, and, in a browser, a copy left by an older version of the app. Nothing on the device is sent anywhere except to this app's own server.

Deleting a block or a project

You can delete part of your calendar without deleting the account, in the app or on the web. To delete a block, tap it in the Calendar tab and choose Delete; for a block that repeats, choose All days to delete the whole block, or This day to delete only that day. To delete a project, open the Projects tab, tap the project and choose Delete; its blocks stay, without a color.

The server deletes it the next time the device syncs. What stays there is what "What your calendar holds" above describes: a row with only the identifier and when it was changed and deleted, kept until the account is deleted, and for one day of a block, a row that says the day was deleted. The backups made before the deletion keep it for up to 14 days.

Deleting your account

In the app: open the Account tab, choose Delete account and enter your password. This deletes the account, its sessions and links, and every project and block on the server, at once and for good. Your other devices will ask you to sign in.

Without the app: write to the address above from the email address of your account, and the account is deleted the same way.

Either way, what remains is:

• The abuse counters, for up to an hour: a count filed under your address, under your account or under the address a request came from — never your calendar.
• The backups made before the deletion, for up to 14 days, and the two server logs, for up to 14 days.
• On each device you used, whatever the app kept there: in a browser, until you clear the site's data; in the Android app, until you remove the app. Deleting the account empties your calendar on the device you delete it from, but a copy the app made before replacing your calendar, or, in a browser, a copy left by an older version of the app, stays on that device; a copy kept because a save could not be read stays on that device too; your other devices keep theirs until you clear them.

Changes

This page changes when what the app keeps changes. The date at the top says when it last did.