Privacy Policy

Sabotages is free and run by an independent developer in the UK. For any privacy question or request, get in touch through our Contact page.

When you’re signed out, nothing you track is stored, and it’s gone when you leave. Display settings, like your theme and colour palette, stay on your device either way.

When you’re signed in, a copy of your data is also kept in your browser so the app works offline.

Your data is only saved when you have an account. We store your email address (so we can send you sign-in codes) and your trackers, daily scores, notes, medication doses and the times you ticked them. This is kept in a Supabase database hosted in London (eu-west-2).

Your scores, notes and medication can reveal information about your health. UK data protection law treats this as special category data. We only store it with your explicit consent, which you give when you create an account. You can withdraw that consent at any time by deleting your account.

We use your data only to provide the service you asked for: saving what you log, syncing it between your devices, showing your reports and sending your sign-in codes. Our lawful basis for this is that it’s needed to provide the service. For health information, our lawful basis is your explicit consent.

We don’t sell your data and we don’t run advertising trackers.

We use a small number of services to run Sabotages:

• Supabase stores your account and everything you log.
• Vercel hosts the website.
• Resend emails your sign-in codes.
• hCaptcha checks the sign-in, sign-up and contact forms to block bots.
• Vercel Web Analytics counts visits. It doesn’t use cookies and doesn’t receive anything you track.

Some of these may process data outside the UK. Where they do, it’s protected by safeguards recognised under UK law.

We keep your data until you delete your account. When you do, your account and everything in it is deleted.

You can:

• see and export your data at any time from Settings
• correct your data by editing it in the app, or ask us through our Contact page
• delete your account and everything in it from the Account page
• withdraw your consent, by deleting your account

If you’re unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Each account can only read its own data. Everything travels over HTTPS. There are no passwords to leak: you sign in with a six digit code sent to your email.

Sabotages is for adults aged 18 and over. Please don’t create an account if you’re under 18.

Sabotages is free. Any optional donation is handled by a third party (Ko-fi). We never see your card details.

If we change this policy, we’ll update it here and change the date at the top.