Privacy

Last updated: September 2026.

This privacy statement covers the Addy beta (the website getaddy.app). It explains what we collect, why we collect it, and what your rights are.

1. Who is responsible?

Addy is an independent project run by one person. Under the GDPR the controller can be a natural person, so you do not need a registered company for this.

Timon Slingerland
Email: timonslingerland@gmail.com

Questions about your data? Email timonslingerland@gmail.com.

2. What we collect

• What you type into the dump. This is sent to an AI model so it can turn it into three wins. See section 5.
• Your wins — the task text, its first step, importance, any deadline hint, the estimated minutes, whether it is checked off, and how long the timer ran.
• An anonymous account. When you open the tool we create a random identifier so your wins can be stored. It contains no name and no email address.
• Your email address — only if you choose to save your wins, together with your choice about the launch notification.
• Technical data such as your IP address, handled by our hosting and database providers to deliver and secure the page.

If you never enter an email address, your wins either stay in your own browser (local storage) or sit in an anonymous account that is not linked to you.

3. Why we collect it, and on what basis

• Turning your dump into wins — necessary to deliver the thing you asked for. GDPR article 6(1)(b).
• Storing your wins so they are still there when you return — same basis, and your consent where your email address is involved. Article 6(1)(a).
• Emailing you when the app launches — only if you tick that box. Consent. Article 6(1)(a).
• Keeping the page running and preventing abuse — legitimate interest. Article 6(1)(f).

You can withdraw consent at any time by emailing timonslingerland@gmail.com. You can also delete your data yourself from the Account panel inside the tool.

4. How long we keep it

Your wins and your email address stay in your account until you delete them. The Delete my data button in the Account panel deletes the account itself — your wins, and the email address along with it. You can always email us instead. If you never add an email address, there is nothing on our side that identifies you.

5. Who we share it with

Only the processors needed to run the beta:

• Supabase — database, anonymous sign-in and email delivery.
• OpenRouter — routes your dump to an AI model that writes the wins. The dump text is sent for that single request only.
• Cloudflare — hosting and CDN for this site.
• PostHog (EU servers) — anonymous usage statistics: which pages are viewed, which buttons are pressed, and whether a dump turns into a first step. We send no email address and no win text, and the IP address and the location fields derived from it are stripped from every event before it leaves your browser.

We do not sell your data and we do not add you to a marketing list. These providers offer data processing terms as part of their own agreements.

6. Transfers outside the EEA

Some of these providers may store data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

7. Cookies and local storage

We use no tracking cookies and no cross-site advertising trackers. We do use PostHog (on EU servers) to count anonymous usage: page views, which buttons get pressed, and whether a dump leads to a completed first step. That identifier lives only in the memory of the current tab — it is not a cookie, it disappears when you close the tab, and it is never linked to your email address. Your theme and accent choice are not remembered. Your browser's local storage is used for three things: to keep your wins when the tool runs in offline mode, to remember whether you turned the timer sound on or off, and to hold the anonymous session so your wins are still yours when you come back to this browser.

8. Security

This site runs over HTTPS. The database uses row-level security, so an account can only ever read and write its own wins, and access to the data is restricted.

9. Your rights

Under the GDPR you have the right to:

• access your data;
• correct inaccurate data;
• delete your data;
• restrict processing;
• data portability;
• object to processing;
• lodge a complaint with the Dutch Data Protection Authority.

To exercise any of these, email timonslingerland@gmail.com.

10. Changes

We may update this statement. The current version is always on this page.

11. Contact

For any privacy question, email timonslingerland@gmail.com.