Privacy Policy

PDND (“Please, Do Not Disturb”) is operated by R2A TECHNOLOGY LTDA (Rômulo Alves's company), which is responsible for your personal data (the “controller” under Brazil's LGPD and the EU/UK GDPR).

• Operator: R2A TECHNOLOGY LTDA (Rômulo Alves's company), based in Brazil
• CNPJ: 43.002.719/0001-74
• Address: Rua Reinaldo Klein, 177, Sapiranga, RS, 93800-512, Brazil
• Email: [email protected]

For any privacy question or request, email us. That's the fastest way.

Your account. Your name, email address and password. We store the password only as a salted hash, so we can't see it.

Billing. Payments are handled by Stripe. PDND never sees or stores your full card number. We receive what we need to give you access, such as whether your payment went through (or was refunded).

How you use PDND.

• Your DND sessions: when they start and end, and any extensions.
• Your status links: the private label, the display name visitors see, and the link's random identifier.
• API access tokens: stored as a hash (we only show the full token to you once), with their name, expiry and when they were last used.

Push notifications. If you turn on reminders, or if someone viewing a status link taps “Notify me”, we store the web push subscription their browser gives us (an endpoint address and encryption keys) so we can send those notifications. Status-link visitors don't need an account, and we don't ask them for their name or email.

Cookies and local storage. We use a session cookie to keep you signed in (for up to 30 days, or until you sign out), a random device identifier cookie, and your browser's local storage to remember notification settings on that device. We don't use advertising or cross-site tracking cookies. PDND uses Umami, a privacy-friendly analytics tool we host ourselves, to count page visits. It sets no cookies, does not track you across other sites, and does not collect personal data. We share it with no advertisers or other third parties.

Technical data. Like most websites, our servers keep basic logs, including IP address, browser type and request times. We use them for security, preventing abuse and rate limiting.

Messages you send us. If you email us, we keep the conversation so we can help you.

• To provide PDND: your account, sessions, status links, the API, and transactional emails like confirming your address or resetting your password. Legal basis: performing our contract with you.
• To bill you and keep the records the law requires. Legal basis: contract and legal obligations.
• To keep PDND secure: preventing abuse, fraud and spam, rate limiting, and the captcha on sign-up and sign-in. Legal basis: our legitimate interest in running a safe service.
• To send push notifications you asked for. Legal basis: your consent, which you can withdraw anytime by turning notifications off in PDND or in your browser settings.
• To comply with the law and respond to valid legal requests.

We don't show ads, and we don't sell your data. Ever. Your one-time purchase is how PDND makes money.

Anyone who opens one of your status links sees the display name you chose for that link, whether you can be disturbed right now, and when your current session ends. They don't see your email address, your other links, or anything else about your account.

Status links are unlisted, not secret: anyone who has the link (including someone it was forwarded to) can see the status. We ask search engines not to index them. Delete a link and it stops working right away.

We share personal data only with service providers that help us run PDND, and only what they need:

• Stripe: payment processing.
• Cloudflare: content delivery and DNS, protection against attacks, and the Turnstile captcha on sign-up and sign-in.
• An SMTP email provider: sending transactional emails, such as confirmation and password-reset messages.
• exe.dev: hosting the servers that run PDND and store its data.
• Browser push services (operated by companies like Apple, Google, Mozilla and Microsoft): delivering web push notifications to devices that opted in.

We may also disclose data when the law requires it, or when it's needed to protect the rights, safety or property of our users, the public or PDND.

PDND is operated from Brazil, and some of our providers process data in other countries, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the contractual protections our providers offer.

• Account data, sessions, links and tokens: for as long as your account exists. When you delete something (a link, a token), we delete it.
• When you ask us to delete your account, we delete your personal data, except records we must keep by law (for example, billing and tax records).
• Push subscriptions: until notifications are turned off, or until the browser's push service tells us the subscription has expired.
• Server logs: only as long as needed for security and abuse prevention.

Under the LGPD (Brazil), the GDPR (EU/UK) and similar laws, you can ask us to:

• confirm whether we process your data, and give you access to it;
• correct data that is incomplete or wrong;
• delete your data;
• export your data in a portable format;
• tell you who we share it with;
• stop processing based on consent (by withdrawing it), or object to other processing.

To exercise any of these, email [email protected]. We may need to confirm it's really you, and we'll reply within the time the law requires. You can also complain to a data protection authority, such as Brazil's ANPD or the authority where you live.

We protect your data with HTTPS, salted password hashes, and hashed session and API tokens, and we limit access to what's needed to run PDND. No system is perfectly secure, though. If we learn of a breach that affects you, we'll let you know as the law requires.

PDND is not intended for anyone under 18, and we don't knowingly collect data from them. If you think a minor has given us personal data, email [email protected] and we'll delete it.

If we change this policy, we'll update the “Last updated” date above. For significant changes, we'll let you know by email or in the app before they take effect.

Questions, requests or concerns? Email [email protected]. See also our Terms of Service.