Privacy
Privacy policy
Plain answers about what this site does and does not do with your information.
The short version
- There are no accounts, no sign-ups and no server-side storage of anything you enter.
- Your Track journal never leaves your device. We cannot see it, and neither can anyone else through this site.
- Google Analytics is used to see which pages and tools are useful — but only sets cookies if you accept them, and you can change your mind at any time.
- We do not sell, rent or share personal information, and we show no advertising.
What we collect and why
Usage analytics (Google Analytics 4)
With your consent, Google Analytics records anonymised information about how the site is used: pages and tools opened, approximate region (IP addresses are truncated), device type and browser, and how you arrived. We use this to understand which resources and tools are helpful and to fix problems. The legal basis is your consent (GDPR art. 6(1)(a)); in Australia this is handled under the Privacy Act 1988 and the Australian Privacy Principles.
If you decline, Google Analytics runs in "consent denied" mode: no analytics cookies are set and no persistent identifiers are stored; only cookieless, aggregate pings are sent. If your browser sends a Global Privacy Control signal we treat that as declining. You can change your choice any time via the Cookie settings link in the footer of every page.
Google may process this data on servers outside your country, including in the United States, under its standard contractual safeguards and the EU–US Data Privacy Framework. Learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites. You can also block Google Analytics with Google's opt-out add-on.
Your journal (Track)
Everything you enter in Track — ratings, readings, sleep, food, exercise, substances, medicines, supplements, notes and tasks — is stored only in your browser's storage on your own device (IndexedDB, mirrored to localStorage). It is not transmitted to NotBroken or to any third party. When you export a PDF or JSON file, the file is created on your device; where you then save or share it is up to you. Deleting your browser's site data deletes the journal.
Preferences
Your light/dark theme, your cookie choice, whether you have seen the Track notice, and your audio-compatibility setting are stored in your browser's localStorage so the site remembers them. They contain no personal information.
If you email us, we keep your message for as long as needed to respond and to maintain the directory, and do not add you to any list.
Cookies and similar technologies
| Name | Purpose | Set when | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics — distinguishes visitors (anonymised) | Only after you accept analytics | Up to 2 years |
nb-consent | Remembers your cookie choice (localStorage) | When you choose | 6 months, then we ask again |
nb-theme, nb-simple, nb-track-ack, nb-audio-mode | Interface preferences (localStorage) | When you change a setting | Until cleared |
health_journal.db, nb-journal:* | Your private journal (IndexedDB / localStorage) | When you use Track | Until you clear it |
Your rights
Because we hold no account data and your journal stays with you, most requests can be fulfilled by you directly: clear your browser's site data to erase everything, or export it with the Backup button. Depending on where you live (for example under the GDPR, the UK GDPR, the California Consumer Privacy Act, Brazil's LGPD or the Australian Privacy Principles) you may have rights to access, correct, delete or restrict the use of personal information about you, to object to processing, to withdraw consent, and to complain to a supervisory authority. To exercise any right in relation to analytics data or email correspondence, contact nathan@bigbang.business. We do not discriminate against anyone for exercising their rights.
Children
NotBroken is intended for adults (18+). It is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided information through the contact address, email us and we will delete it.
Security
The site is served over HTTPS. Your journal is stored by your browser's own storage mechanisms and is not encrypted by us; protect your device with a passcode and be careful on shared devices. No method of storage is perfectly secure.
Third-party links
The directory links to hundreds of external organisations. Their sites have their own privacy practices, which we do not control and are not responsible for.
Changes and contact
We may update this policy as the site changes; the effective date at the top will change and significant changes will be noted on this page. Questions or requests: Nathan Leary, nathan@bigbang.business. If you are in the EU/EEA or UK and are unhappy with how a request was handled, you may complain to your local data-protection authority; in Australia, to the Office of the Australian Information Commissioner (oaic.gov.au).