Privacy
Last updated 9 August 2026
This policy covers NowFlex, at nowflex.lol. It is short because we store very little: an account so you can find the notes you have bought, and the notes themselves. Nothing about you is sold, shared, or used for advertising.
What we store
The name and message you choose, your country, the amount you paid, the date, and a code identifying your transaction. All of it except the transaction code is already visible on your public listing.
Your account
An account holds your email address, the username you chose, and a record of when you accepted these terms. Sign-in is handled by Supabase, who store the password if you set one — we never see it, and it is never stored by us in any form. If you sign in with Google instead, we receive your email address and nothing else: no contacts, no files, no other Google data, and we cannot request them.
What we deliberately do not store
Your card details. Your billing address. Your real name, unless you type it in yourself. We keep no advertising or tracking cookies, and there is no analytics script following you around the site. The only cookie set is the one that keeps you signed in.
Your email
Your account holds your address so you can sign in and find your notes. Against the note itself we store only a one-way cryptographic hash of it, which cannot be reversed into your address and is what lets support match a note to a buyer. Polar holds the real address as merchant of record, and we send your claim link through Resend at the moment of purchase.
How you stay signed in
A cookie holding a session token, set when you sign in and cleared when you sign out. It is not used to track you and is not shared with anyone. Notes bought before accounts existed are still reached by a permanent signed link instead — anyone holding that link can edit that note, so treat the email carrying it as you would a password.
Your country
Your flag comes from the billing country your payment processor reports, and you can correct it on your claim form. We read a country header to highlight your row in the nations table, and never store it.
Analytics and advertising
There are none. No analytics package is installed, no advertising network is present, and no third party is given a script that runs on this site. The only cookie set is the session cookie described above.
What a note is not
A note is an image and a listing. It is not currency, not e-money, not a gift card, not a voucher, not a token or cryptocurrency, and not a security or investment. It cannot be redeemed, exchanged, transferred or spent, it carries no monetary value, and it confers no rights or entitlements of any kind. We are not a bank, a money transmitter, or a payment service, and we hold no funds on your behalf.
Deletion
Write to support@nowflex.lol and we will hide your name and message and mark your entry anonymous. We keep the amount, country, and transaction record, because those are financial records we are required to retain. The listing itself is not removed: permanence is the thing being sold, and removing rows would break the ranking for everyone else.
Where the data lives
The database is hosted by Supabase and the site by Vercel. Payments are processed by Polar, moderation is checked by a model served through OpenRouter, and claim emails are sent by Resend. Message text is sent to the moderation model; nothing else about you is.