Privacy Policy

The short version

Donelane stores what you write down and who you share it with, so it can show your team what got done. It sets one cookie to keep you signed in. There is no analytics, no advertising and no tracking, and your posts are never sold or used to train anything.

Who is responsible

Contact: [email protected]

What is stored, and why

Your account

Your email address, the display name you choose, your timezone, when the account was created, and a hashed password if you set one. The email address identifies you and is where digests and sign-in links are sent. The timezone decides when your morning digest goes out.

What you post

Your dones, goals, comments, likes and tags, with the date and time each was written. This is the content of the product: it is visible to the members of the teams you post it in, and to nobody outside them.

Teams and invitations

Which teams you belong to and your role in each, plus invitations you send or receive, which record the invited address until the invitation is accepted or removed.

Email we send and receive

A record of which digests and reminders were sent to you, so the same one is not sent twice. If you reply to a digest to post a done, the incoming message — sender, recipient, subject and body — is stored so the reply can be turned into a post and so a failed one can be diagnosed.

Payment

If your team subscribes, Stripe handles the payment. Card details are entered on Stripe's systems and never reach ours. We keep the Stripe customer and subscription identifiers, the plan, its status and the current period end, so we know what your team is entitled to.

Sign-in

A session cookie keeps you signed in; it is strictly necessary for the app to work and is not used to track you. Magic sign-in links are stored as single-use tokens with an expiry.

Who else sees it

Your teammates, for the teams you post in. Beyond that, only the services needed to run Donelane: the hosting provider that runs the servers, the mail provider that delivers digests and receives your replies, and Stripe for payment. They process this data on our instructions and for no purpose of their own. Nothing is sold, rented, or shared with advertisers, and nothing you write is used to train machine learning models.

Fonts are served from this site, not from Google. Loading a page contacts no third party at all. The one exception is the contact form, which uses Cloudflare Turnstile to keep out spam; that check runs only on that page, and only when you open it.

How long it is kept

Your posts stay until you or your team delete them, or until the account is deleted. Sign-in tokens stop working at their expiry. Server logs are kept only as long as needed to keep the service running and secure.

Some things are deleted automatically once they have done their job, whether or not you ask. Email you send us to post a done — including its subject and text — is removed after 90 days. Used or expired sign-in links go within a day, and invitations that were accepted or that expired are removed after 30 days, which clears the invited address. The bookkeeping that stops a digest or reminder being sent to you twice is kept for 180 days.

Deleting your account

You can delete your account from your settings. Doing so removes your user record, your dones, your goals, the comments and likes you left anywhere — including on other people's posts — your team memberships, your sign-in tokens, the record of reminders sent to you, invitations you sent, and any email you sent us to post a done. Nothing you wrote is left behind. If you were paying, the subscription is cancelled at Stripe at the same time, so nothing is charged afterwards.

Email that other people sent us stays, even if it mentions you. It is their writing rather than yours, and deleting someone else's message because you left would be losing their data, not protecting yours.

Two things are worth knowing before you do it. Comments and likes your teammates left on your posts go with those posts, because the posts themselves are deleted. And a shared goal that one of your dones completed stays completed for the team — it simply stops pointing at the deleted post. Deletion is immediate and cannot be undone, so export anything you want to keep first.

Your rights

You can ask what is held about you, correct it, export it, or have it deleted. Your own posts can be exported as a CSV file from the app at any time without asking. For anything else, write to [email protected].

Changes

If Donelane starts doing something that affects your data, this page changes with it. The date at the top shows when it was last revised.