Notano

Privacy Policy

Last updated October 9, 2026

This policy explains what we do with personal data on notano.app and on the Notano early-access list. It provides the information required by Articles 13 and 14 of the GDPR. The Notano app itself is not open to the public yet; it will have its own privacy policy before it is.

§ 1. Controller

  1. The controller is Marcin Frątczak, running a sole proprietorship under the business name Marcin Frątczak Labs, ul. Warszawska 40/2A, 40-008 Katowice, Poland, VAT No.: PL6252163911, entered in the Polish Central Register and Information on Economic Activity (CEIDG) (“we”).
  2. For anything related to personal data, write to app@notano.app or to the address in paragraph 1, in English or Polish. We have not appointed a data protection officer.

§ 2. The early-access list

  1. When you join the early-access list, we process:
    • your email address,
    • where on the page you asked (iPhone, Android, the web app or the page in general), so we know which version to invite you to first,
    • the consent you gave by ticking the box, the time you joined and confirmed, and the IP address you did it from.
  2. We use your email address to send you a link to confirm it and then, once confirmed, emails about early access to Notano: invitations to try it before everyone else and news about the launch. The legal basis is your consent (Article 6(1)(a) GDPR), which also covers receiving these emails under the Polish Electronic Communications Law.
  3. We keep the time, the IP address and the fact of your consent to be able to show that you gave it (Article 7(1) GDPR). The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
  4. Joining is voluntary. Without an email address and the consent you cannot join the list; nothing else on the site depends on it.
  5. You can withdraw your consent at any time with the unsubscribe link in every email or by writing to us. Withdrawing it does not affect the lawfulness of what was done before.

§ 3. Protection from bots

  1. When you open the early-access form, Cloudflare Turnstile checks that you are a person and not a bot. To do that, Cloudflare processes your IP address and technical information about your browser and device. We receive only the answer: person or not.
  2. The legal basis is our legitimate interest in keeping the list free of fake and abusive sign-ups (Article 6(1)(f) GDPR). The check is automated; if it fails, you can try again or write to us, and it has no other effect on you.

§ 4. Visiting the site

  1. notano.app is served by Cloudflare. Like any web server, it processes your IP address and the details of each request (the address asked for, the time, the browser) to deliver the page and to protect it from attacks. Our own error logs hold no email addresses and are kept for a few days.
  2. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
  3. The site sets no cookies and shows no ads.

§ 5. Analytics

  1. We count visits to notano.app with Umami, an analytics tool we host ourselves, so the data goes to no third party. It sets no cookies and does not store your IP address: it uses it only to work out the country and to tell one visit from another for the day.
  2. We see which pages are visited, where visitors came from (the referring site), the type of browser, operating system and device, the country, and two events of our own: that the early-access form was opened and that someone joined the list, each with where on the page they clicked. Your email address is never sent to analytics.
  3. If your browser sends a Do Not Track signal, Umami counts nothing.
  4. The legal basis is our legitimate interest in knowing how the site is used and improving it (Article 6(1)(f) GDPR). You can object at any time: write to us, or block the script or turn on Do Not Track in your browser.

§ 6. Emails

  1. The list runs on Sendy, mailing software we host ourselves, so your address is not handed to a newsletter company.
  2. The first email only asks you to confirm your address. If you do not confirm it, you get nothing else.
  3. Every email we send to the list has an unsubscribe link. Unsubscribing takes one click and costs you nothing.

§ 7. Who else processes the data

  1. We use these providers:
    • Cloudflare, Inc.: hosting of this website, DNS, Turnstile (protection from bots),
    • Amazon Web Services EMEA SARL: Amazon Simple Email Service, which delivers the emails Sendy sends.
  2. Data may also be received by public authorities, only where the law requires it.
  3. Cloudflare and Amazon are US companies or have US affiliates. Where data goes to the United States, the basis is the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

§ 8. How long we keep it

  1. Your place on the list: until you unsubscribe, ask us to delete it, or we close the list.
  2. After you unsubscribe, Sendy keeps your address marked as unsubscribed, so that it is never emailed again by mistake and so we can show that we respected your choice. If you would rather it were gone completely, write to us and we will delete it.
  3. Request logs: as long as Cloudflare keeps them, and our own error logs a few days.
  4. Analytics: 12 months.

§ 9. Your rights

  1. You have the right to access your data and receive a copy of it, to have it corrected, erased, restricted or ported, and to object to processing based on our legitimate interest. You can withdraw consent at any time.
  2. Write to app@notano.app. We reply within one month. We may ask you to confirm your identity, for example with a message from the address the request is about.
  3. If you believe we have handled your data unlawfully, you can complain to the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.
  4. We do not make decisions based solely on automated processing that produce legal effects for you.

§ 10. Changes

  1. If this policy changes materially, we will tell the people on the list by email before the change takes effect. The date at the top always shows the current version.

← Back to the home page