Privacy policy

This describes what this installation of Neer stores about you, who can see it, and what it does not do. It is written from how the software actually behaves rather than from a template.

The platform administration and support team is responsible for managing data privacy and handling inquiries related to your information.

What is collected

Because you gave it

• A username, an email address and a full name. These are required.
• A phone number and a gender -- both optional. Gender is used only to pick a default avatar drawing when you have not uploaded a picture.
• A profile picture, if you upload one. It is stored privately and streamed through the service; it is never a public URL.

Because you used the product

• Your meals, day by day, and your weekly meal plan.
• Costs you submitted, and the receipt images attached to them.
• Your duty assignments, claims, swaps, missed turns and fines.
• Your ledger entries: charges, payments, deposits, adjustments and any settlement. These are append-only and are not deleted -- see retention below.
• Notifications sent to you, and whether each delivery succeeded.

Because the service has to be operable and secure

• Sign-in attempts, with the IP address and browser user-agent, successful or not. This is what makes lock-out after repeated failures possible.
• An audit trail of administrative and money-moving actions: who did what, when, and to which record.
• Ordinary server logs.

What is not collected

• No card or bank details. Neer processes no payments; there is nothing to store.
• No advertising or analytics trackers, and no third-party scripts on the public site.
• No images loaded from other websites. An image on a public page can only come from this service's own asset route, which is enforced when content is saved -- so reading a page here does not tell a third party that you read it.
• No location data, no contact-list access, and no device identifiers beyond what a browser sends on every request.
• No selling of anything to anybody.

How long records are kept

• Ledger entries and closed months are kept as long as the mess exists, because other members' statements are derived from them. When a mess is deleted, its records are purged with it.
• Notifications are kept for 180 days and then purged by a background job.
• Audit log rows are append-only and kept for the life of the installation.
• Profile pictures are deleted when replaced or when the account is deleted.

Cookies

Neer sets four first-party cookies, all required for the service to function:

1. an access token, used to authenticate requests;
2. a refresh token, used to renew the access token without prompting for a password;
3. a theme preference (light, dark, or system);
4. a session cookie holding your current mess selection.

No third-party cookies are set. No tracking cookies are used.

Your rights

You can export your statements and closing summaries at any time as PDF. To request deletion of your account and personal data, reach out via contact us.