what we do with your data
Who holds what about you, why, for how long, and how to make us stop.
This notice describes how promeNOODology handles personal data on promenoodology.com and in the promeNOODology members’ app. It is written to be read rather than to be survived, and it is accurate: everything named below is something the site actually does.
We sell no personal data, we run no advertising, and we do not track you across other websites. There is no analytics service on this site and no advertising identifier in the app.
Who is responsible
The controller is promeNOODology, — still to be filled in — (legal form, registered name and address). Questions, requests and complaints: info@promeNOODology.com, which reaches a person rather than a queue.
We have not appointed a data protection officer; we are not required to. The address above is the one to use.
If you only read the website
Nothing is asked of you and nothing is stored about you. There is no analytics, no advertising, no cookie banner and no cookie — the one cookie this site can set exists only once you have signed in, and it exists to keep you signed in.
Our hosting provider processes the technical data any web server receives in order to serve a page and to defend itself — IP address, the address requested, the time, and the browser’s own description of itself. That processing rests on our legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR; Art. 31(1) Swiss FADP). We do not use those logs to build a picture of anybody, and we do not join them to any account.
If you are on the community page
We publish your name, the country you told us you are from, and a photograph if you gave us one. Publication is on the basis of your consent (Art. 6(1)(a) GDPR), given by turning it on, and you can withdraw it at any moment in the app under your personal information — the page changes within a minute. An administrator may also hide an entry; nobody can be published against their settings.
If you have an account
We hold: your email address, so that a sign-in code can be sent to it; your name; the country you gave, if any; your portrait, if you gave one; a member number, allocated once and never re-used; the date you joined; whether you are shown on the community page; which evenings you have said you are coming to or marked to think about, how many of you, and what you said you would bring; anything you have written in the app and the photographs attached to it; whether you have waved at somebody or been waved at; and anything you have sent us through the app’s bug and feedback form, which for a bug report includes the screen you were on and the browser your phone reports.
This is processed to perform the membership you asked for (Art. 6(1)(b) GDPR) and, where it concerns keeping the club’s own records straight, on our legitimate interest in running it (Art. 6(1)(f)).
There are no passwords on this site. Signing in sends a one-time code to your address, valid for one hour and one use. This is deliberate: an account with no password has nothing on it worth stealing and nothing for anybody to reuse elsewhere.
If you sign in with Apple
Apple tells us an identifier for you and an email address, and — on the first authorisation only — the name you allow it to share. If you choose to hide your email address, Apple gives us a forwarding address of its own instead of yours; we cannot see the address behind it, and mail we send to it is relayed by Apple. We ask Apple for nothing else. Apple’s own handling of that exchange is described in Apple’s privacy policy.
If you are on the newsletter
We hold your email address and nothing else, and only after you have answered the note that asks whether you meant it — an address is never added to the list by anybody but its owner. The basis is your consent, and every letter carries the way off the list. Withdrawing it removes the address rather than flagging it.
Who else can see it
Only the processors this site is built on, each of them under a data processing agreement and none of them permitted to use anything for their own purposes:
Vercel Inc., which hosts the site and runs its server code. Supabase, which holds the database, the files and the accounts; this project’s data is stored in the European Union. Infomaniak Network SA in Switzerland, which sends the email. Apple Inc., only where you choose Sign in with Apple.
Where a processor is in the United States, transfers rely on the European Commission’s standard contractual clauses together with that provider’s own certification under the EU–US Data Privacy Framework. Nobody outside this list receives personal data from us. We do not sell it, rent it, or hand it to advertisers, and we would resist any request to do so.
We disclose data to a public authority only where the law obliges us, and where we may say so, we will.
How long we keep it
Your account and what is on it, for as long as you are one of us. Delete your account in the app and the rows are deleted — profile, portrait, sign-ups, posts, replies, waves, the pictures on them, and the login itself. It is not a flag and it is not a queue.
Anything an administrator deletes in the back of the house goes to a bin that empties itself after thirty days, so that a mistake on a Tuesday can be undone on a Wednesday. After that it is gone.
Photographs of an evening stay in the archive as a record of what happened, with the photographer credited. If you are in one and would rather not be, write to us and we will take it down.
Bug reports and feedback are kept until they have been dealt with. Newsletter addresses are kept until they are withdrawn. Server logs are kept by our hosting provider for its own short retention period.
What you can ask for
You may ask what we hold about you and receive a copy; ask for a correction; ask for deletion; ask us to restrict or to stop a particular processing; object to processing based on our legitimate interest; and ask for what you gave us in a portable form. Where processing rests on consent, you may withdraw it at any time, and the withdrawal does not affect what was lawful before it.
Write to info@promeNOODology.com. We will answer within a month; if a request is genuinely complicated we will say so and why, and we will not charge you for asking.
If you think we have got it wrong you may complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner; in the European Union, the authority where you live or work.
Automated decisions, and children
We make no automated decisions about anybody and we profile nobody. The app is not for children: an account is for somebody who cooks with us, and we do not knowingly hold data about anyone under sixteen. If one has reached us, tell us and it will go.
Keeping it safe
Everything travels over an encrypted connection. Access to the database is governed row by row, so one member’s session cannot read another member’s things; the keys that could are held by the server and never sent to a browser. Administrator access is limited to the people who run the club, and every change an administrator makes to content is recorded with their name and the time.
Changes to this notice
When it changes, the date at the foot of this page changes, and the previous wording remains in this site’s own history. If a change matters to you — a new processor, a new purpose — we will say so rather than leaving you to notice.
Last changed 21 August 2026. Anything wrong or missing: info@promeNOODology.com.