Privacy notice · Nimblio

Who is responsible

The publisher named in the imprint is the data controller for this website. For any question about your data, write to privacy@nimblio.app.

The Nimblio app

Nimblio runs on your PC. Your workflows, run history, settings and logs are stored in your user profile (%LOCALAPPDATA%\Nimblio) and are not sent to us. Diagnostics are off by default. You don’t need an account to use the app.

When the app checks for updates, it sends the version you have, the release channel and the processor type (for example 0.1.0, stable, x64), nothing else.

Visiting this website

Our servers record technical information needed to deliver pages and keep the site secure: the page requested, the time, the browser’s user agent and a shortened or hashed form of the IP address. These logs are kept for 30 days. Legal basis: our legitimate interest in running a secure website (GDPR article 6(1)(f)).

The site loads no third-party scripts, fonts, trackers or advertising. If we add visitor statistics, they will be hosted by us and work without cookies.

Cookies

We only use cookies that are strictly necessary, so there is no cookie banner:

Form protection: when you use a form, a cookie set by our API proves the form was sent from this site (protection against cross-site request forgery). It lasts for your browser session.
Sign-in: if you create an account, a session cookie keeps you signed in. It is only readable by our server, and you can end your sessions from your account at any time.

Spam protection

To keep forms free of spam without a puzzle, your browser solves a small calculation before sending them. This uses no cookie and no third party.

Contact form

When you write to us we receive the topic you chose, your name if you give it, your email address, the subject and your message. We use them only to answer you. Messages are deleted 12 months after they are received. Legal basis: our legitimate interest in answering the questions people send us (article 6(1)(f)).

Your account

An account is optional; the Nimblio app never needs one. If you create one we keep your email address, a hash of your password (never the password itself), when you created the account, and for each signed-in device the browser name and a scrambled form of the network address. Security events such as sign-ins and password changes are kept in a log to protect your account. An account whose email is not confirmed within 7 days is deleted. Until a delete button is available in your account, write to us and we will delete it with everything linked to it. Legal basis: the contract you enter by creating an account (article 6(1)(b)).

If you subscribe, we keep your email address, the time you agreed and the time you confirmed. We first send a link to confirm the address; nothing else is sent until you open it. Every email has an unsubscribe link, and we stop sending as soon as you use it. Legal basis: your consent (article 6(1)(a)), which you can withdraw at any time.

Downloads

We count how many times each version is downloaded per day. The count holds nothing about who downloaded it.

Who else handles the data

Our hosting provider stores the website, its database and backups, and an email delivery provider sends our emails. Both act on our instructions only and are based in the European Union. [Name the providers before launch.] We never sell your data or share it for advertising.

Your rights

You can ask to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. Write toprivacy@nimblio.app; we answer within one month.

You can also complain to the data protection authority of the country where you live or work.

How we protect it

All traffic is encrypted (HTTPS). The database is not reachable from the internet, backups are encrypted, and passwords are never stored in readable form. Read our security policy to report a problem.