Local notebook
Games and tracking work locally. Without a cloud-processing choice, your health notebook is not uploaded. An account can still hold membership and account details.
Nootrack / Data use
Your notebook. Your choice.
A clear view of what stays on your device, what syncs, and what can contribute to shared knowledge.
Optional public guide analytics
The separate reading site at read.nootrack.app can use Google Analytics only after you select Allow analytics. This choice is separate from advertising. Google receives public guide page visits, clicks on Open notebook, cookie identifiers and technical browser information. Analytics cookies are restricted to the reading site. Google signals and advertising personalization are disabled.
Analytics never runs inside your notebook and receives no account identifiers, health records, compounds, scores or private notes from Nootrack. Public page URLs contain no query parameters or fragments, and analytics receives no page referrer. The analytics choice is stored on the reading site for up to six months. Decline analytics stops further measurement and removes its analytics cookies. It cannot recall information already received by Google. Global Privacy Control keeps analytics off. See Google's privacy policy.
Private sync
Store future results and recorded health context on the server for your private notebook and personal comparisons. No population research contribution.
Research sharing
The same private storage, plus eligible data contributes to population statistics after email verification. Individual records and notes are not published.
Choose—and change—your sharing
In Me, select Change beside your sharing status to choose research sharing, private sync, or local-only tracking. Your account choice follows you between devices. Existing local check-ins are not automatically backfilled when you join.
Stopping new uploads is not the same as deleting records already saved. You can export server data or delete your account in Me → Account & privacy. Local device copies and downloaded exports are separate.
Account-linked, not an anonymous database
Uploaded records are linked to your protected account. Statistical processing uses account identifiers rather than publishing identities; that is pseudonymization, not a promise that raw health records are anonymous.
Other members receive only eligible aggregate results. Public production requires at least 20 participants in a cohort, with additional comparability and privacy checks. Small or unsuitable groups stay unavailable.
Exactly what can be stored
Account information includes your email, display name, settings, authentication records and membership. If you enable processing, your notebook can include game scores and trial timing, device/protocol context, check-ins, compounds, estimated doses, timing, routines, mood, sleep, heart measurements and notes.
Compound and intake notes stay private and are not published or interpreted by automated research text analysis. A separate, explicit community-catalog submission can share a compound name; it does not publish your dose history or private notes.
Wearable imports need both your processing choice and an actual provider connection. A saved routine is a plan—not proof that you took a dose.
Hosting, email, payments and support
The deployment uses Render for application hosting and Neon for PostgreSQL, with the primary application/database region in Frankfurt. This is not a claim that every provider processes all data only in that region.
Resend sends verification and recovery emails. Stripe handles checkout, billing and subscription management; health logs and free-text notes are not sent as checkout details. Support mail to support@nootrack.app is forwarded through Cloudflare to the operator’s Gmail inbox. Avoid sending sensitive health details by email.
Ads on the public guides
The separate reading site at read.nootrack.app can display one Google AdSense placement after an article. When advertising is enabled, it loads Google’s consent and advertising library. Ad requests stay paused until the site confirms permission through the consent platform. Personalized ads require consent; refusing leaves the guides readable.
Google and permitted advertising partners can receive technical information such as your IP address, browser and public page context. With the required permission, cookies and identifiers can be used to deliver, measure and personalize ads. See how Google uses information from partner sites. These providers have their own processing and retention policies.
The public guides cannot access your private notebook. Compounds, scores, health records, notes and account identifiers are not sent to advertising partners or used for targeting. Advertising libraries never load inside the notebook. The Privacy choices button on each advertising enabled guide removes its current placement and opens the consent settings. Withdrawal prevents further requests on that page; information already received cannot be recalled. Global Privacy Control keeps advertising off.
Sponsorship and advertising
The free web notebook can show one labelled sponsor card on Today. Nootrack serves the same reviewed text and destination to everyone eligible to see it. No ad network scripts, tracking pixels, advertising cookies, impression counters or click counters are included.
Your compounds, doses, notes, game results, sleep and heart data are not used to select sponsors or shared with them. Normal hosting request logs still apply. Opening a sponsor link takes you to its website, where its own privacy policy applies; Nootrack sends no notebook data or page referrer with the link.
Researcher members do not see sponsor cards. Sponsorship does not affect research methods, results, compound rankings or membership access. See our sponsor policy.
Saved records, deletion and copies
Saved server records remain available until changed or deleted; stopping sharing alone does not erase them. Account deletion removes server health records and identifying profile fields. An opaque account identifier and billing records remain for reconciliation.
Local notebooks, exports, wearable-provider accounts, payment-provider records and provider backups are separate. No fixed universal retention or instant deletion of every external copy is promised here. Contact support for a data request you cannot complete in the app.