Privacy Policy

Nohmo is an analytics platform that developers ("customers") embed in their own websites and apps to understand how their users behave. This policy explains how we, Nohmo, handle data when you use our dashboard and SDK.

There are two kinds of people in the picture: our direct customers (the developers who sign up for an account) and the end users of those customers’ products (whose interactions the SDK records on the customer’s behalf). For end-user data, our customer is the data controller and Nohmo acts as a processor.

When the Nohmo SDK runs in a customer’s product, it records technical, non-identifying signals: a randomly generated device ID (stored in the browser’s localStorage or app storage), basic device characteristics (browser, operating system, screen size, language, timezone), and product events such as page/screen views, clicks or taps, scroll depth, time spent, and any custom events the developer chooses to send.

Approximate location (country, region, city) is resolved from the network IP address at request time. We do not collect precise GPS location.

The SDK never captures the values typed into forms or inputs — only that an interaction occurred. Password fields, payment/credit-card fields (autocomplete="cc-*"), and any element marked data-sensitive or data-nohmo-ignore are skipped entirely.

We do not collect personal identity (name, email, user ID) unless the developer explicitly calls linkUser() to associate a device with a known account — for example, after their user logs in. When that happens, the email/ID is provided by the developer’s own application.

On the web, the SDK stores a device ID and user ID in localStorage and the current session ID and captured UTM parameters in sessionStorage. In React Native apps, equivalent values are stored via the app’s storage. These exist to recognise returning devices and stitch sessions together — they are not third-party advertising cookies.

We use a limited set of third parties to operate the service: an IP-geolocation lookup to resolve approximate location, and Google Firebase Cloud Messaging (only when a customer enables uninstall detection for their app) to deliver the silent pings used to detect app uninstalls. These providers receive only the data necessary for their function.

Data is used solely to provide the analytics product to the customer who collected it: rendering dashboards, building device journeys and attribution reports, powering the live feed, and firing the webhooks the customer configures. We do not sell data, and we do not aggregate one customer’s data into a profile that is shared with another.

Event data is retained for as long as the customer’s project is active so the dashboard can show historical trends. Customers can request deletion of a project’s data at any time from the dashboard (Settings → Danger zone) or by contacting us. Deleting a project removes its associated event data.

The data belongs to the customer who collected it. Nohmo is designed so that you can own your pipeline — self-hosting is part of our roadmap for teams that need every byte to stay inside their own infrastructure.

End users who wish to access or delete data associated with them should contact the product they used — that company is the controller of their data. We will support our customers in fulfilling those requests. Customers can exercise their own account rights, or ask questions, using the contact below.

Nohmo is a developer tool and is not directed at children. Customers are responsible for ensuring their own use of the SDK complies with laws protecting minors.

We may update this policy as the product evolves. Material changes will be reflected here with a new "last updated" date.

Questions about privacy or data handling? Email webesttechnologies@gmail.com and we’ll help.