This notice covers nixtoffice.com only. The privacy policy for the Nixt Office apps is being reviewed by counsel and will be published here before the apps are generally available.
If you join the beta
When you submit your email address, we keep:
- the email address you typed;
- which form you used, the one at the top of the page or the one at the bottom;
- the date and time;
- the browser identification string your browser sent with the request.
These are stored in Amazon Web Services in Frankfurt, Germany. We use them to send you the beta and news about Nixt Office, and for nothing else. We do not sell them or share them with anyone. They are kept until you ask us to remove them.
To stop one address from flooding the form, your network address is counted for about an hour and then deleted automatically. It is not stored with your email address.
If you create an account
We keep:
- your name, your email address, and whether the account is for you or for an organisation;
- for an organisation, its name, and who belongs to it in which role;
- your password, kept by Amazon Cognito only as a protected hash that nobody can read back; a passkey, if you add one, is kept only as its public half;
- a security log of each sign-in, sign-out and password change: when, with which email address, from which network address and which browser. It is deleted after 400 days;
- your sign-in sessions, each ended after 30 days or when you sign out.
All of this is stored in Amazon Web Services in Frankfurt, Germany, and used to run your account and keep it safe, and for nothing else.
When you choose a password, we check that it has not appeared in a known data breach. The check sends only the first five characters of a one-way fingerprint (SHA-1) of the password to Have I Been Pwned (api.pwnedpasswords.com), which cannot tell from them what the password is. The password itself never leaves us.
To slow down anyone guessing passwords, your network address and the email address you type are counted for up to two hours and then deleted automatically.
When you visit any page
- Access logs. The servers that deliver the site record each request: your network address, the page asked for, the time, and your browser's identification string. These logs are kept in Amazon Web Services in Northern Virginia, United States, for security and troubleshooting, and are deleted after 90 days.
- Fonts. The typefaces are loaded from Google Fonts, so your browser contacts Google's servers and Google receives your network address.
- Your theme. If you switch between light and dark, the choice is saved in your own browser. It is never sent to us.
There are no cookies, no analytics and no advertising trackers on this site.
Your choices
To see, correct or remove what we hold about you, write to hello@nixtoffice.com from the address in question. You also have the right to complain to your data protection authority.