Privacy Policy

Controller

gno.sh is operated by Gordon Mickel, Switzerland. Contact: legal@gno.sh.

What I process

account data such as name, email address, organization membership, and login state
billing metadata needed to map subscriptions and entitlements to an account or organization
published artifacts, snapshots, metadata previews, notes, assets, and access tokens you intentionally upload or publish
transactional email events for verification, password reset, and invitations
server, security, and product telemetry such as request logs, route opens, and publish events

Why I process it

to create and secure accounts
to host and deliver published pages, secret links, invite-only spaces, and encrypted shares
to process billing and enforce plan entitlements
to send required service emails
to prevent abuse, investigate incidents, and maintain service reliability

Processors and infrastructure

gno.sh currently relies on the following infrastructure providers:

Hetzner Online GmbH — application hosting, PostgreSQL, object storage (Germany / EU)
Resend — transactional email delivery (EU processing where configured)
Polar — billing, checkout, subscription management (provider-managed infrastructure)

Public content

If you publish a page as public, the published route, note content, metadata preview, and any included assets are intended to be publicly accessible. Do not publish personal, confidential, or regulated information unless you are entitled to disclose it.

Cookies and session data

gno.sh uses essential cookies and similar storage for authentication, session continuity, and security. It does not use advertising cookies.

Retention

Account and publish records are retained for as long as needed to operate the service, comply with legal obligations, resolve disputes, and enforce the Terms. You can request deletion of your account or published content, subject to legal and operational constraints.

Your rights

Depending on where you are located, you may have rights to access, correct, delete, restrict, or object to processing of your personal data. To make a request, contact privacy@gno.sh.

Changes

I may update this Privacy Policy when the product, providers, or legal obligations change. Material changes will be reflected on this page.