Privacy Policy
Last updated: 2 October 2026
Nemudoro keeps your sign-in ID (your Discord user ID, or your email address if you sign in with email) and your focus history. That is what it needs to keep your companion growing. It does not keep your Discord username, avatar or messages. If you pay for Premium through Ko-fi, we keep a record of the payment, never your name, email address or message; if you buy it in Discord, we keep what Discord tells us you hold. There are no ads, no tracking and no analytics, and your data is never sold.
1. Who is responsible
Nemudoro is run from Portugal by Iulian Virgil Oliveira Strut, who is responsible for your data (the "controller", under the EU General Data Protection Regulation). Contact: hello@nemudoro.com.
2. What we collect
From Discord, when you sign in
- Your Discord user ID, the number that identifies your account. It is how Nemudoro knows your progress is yours.
Sign-in asks Discord only for the
identifypermission. Discord also sends your username and avatar with it, and we do not store either. - Inside Discord, Discord also gives the page a short-lived access token for your account. Nemudoro uses it only to confirm who you are, and never stores it.
Nemudoro has no bot. It never reads, sends or stores Discord messages, and it sees nothing of your servers or friends.
If you sign in with email
- Your email address, stored so you can sign in with it again and so we can show it in Settings. We use it only to send your sign-in codes, and a short notice when the ways to sign in to your account change (one is added or removed, or two of your accounts are joined), so you would know if it was not you: no newsletters, no marketing.
- While a code is waiting to be used, we keep a one-way fingerprint of your address and of the code, and counts of how many codes were sent and tried (to stop anyone guessing codes or flooding an inbox). They are deleted after a day without use.
Each way you sign in (Discord, email) is linked to one account. You choose to link them, in Settings → Account; we never join accounts because two of them share an address. If the sign-in you add already has its own companion, you choose which companion to keep, and the other account's progress and history are deleted (an account with no progress is joined without asking).
What you do in Nemudoro
| Data | What it is |
|---|---|
| Sessions | Each focus session or break: its type and length, how long you actually spent, whether it was completed, finished early or skipped, when it ended, and the Sleep Points it earned. |
| Tags | The optional label you give a focus session (up to 32 characters). |
| Wellness quests | Which break quest you completed, and when. |
| Progress | Your Sleep Points, companion stage, streak and when you last focused. |
| Preferences | Your timezone, daily goal, background scene, companion, lighting, focus length and timer settings. |
| Sign-ins | One entry per place you are signed in: whether it is the website or Discord, when you signed in and when you were last active, and a one-way fingerprint of its key (the key itself is never stored). Deleted when you sign out, after 14 days unused, or 30 days after you signed in, whichever comes first. One made inside Discord goes sooner: after 12 hours unused, or 24 hours after it was made. |
If you support Nemudoro on Ko-fi
Payments for Premium (Terms, section 8) are made on Ko-fi. When you pay, Ko-fi tells Nemudoro about the payment, and we keep:
| Data | What it is |
|---|---|
| Support code | A random code for your account (NEMU-XXXX-XXXX), shown in the Premium sheet, which you
paste into your message on Ko-fi. It says nothing about you. |
| Memberships | Which tier your account holds, when it began and, for monthly Premium, when it runs out. |
| Payment records | For every payment Ko-fi reports, including plain donations that are not a tier: the tier, the amount and currency, Ko-fi's transaction id, the support code found in the message (never the message itself), when it was paid and received, and whether it was matched to an account. |
| Payer fingerprint | For a tier payment, a one-way fingerprint of the email address of the Ko-fi account that paid, made with a secret key. It lets later monthly payments, which carry no support code, reach the same account. The address itself is never stored, and the fingerprint cannot be turned back into it. |
We do not store the payer's name, email address or message. If you linked your Discord account on Ko-fi, Ko-fi also tells us your Discord user ID with each payment; we use it only to find your Nemudoro account, and do not store it with the payment.
If you buy Premium in Discord
Purchases inside the Nemudoro Activity are made through Discord. For every account that signs in with Discord, Nemudoro asks Discord, at most once an hour and right after a purchase, which Nemudoro tiers that Discord account holds, and keeps each as a membership: the tier, Discord's id for the purchase, when it began and, for monthly Premium, when it runs out. We also keep when we last asked. Discord does not tell us your payment details, and we do not ask. For Lifetime and Early Supporter, which have a limited number of places, Discord's id for the purchase and its tier are also kept in a count of places sold. That count holds no account and no Discord user ID, but Discord can tell who made a purchase from its id, so it is a record of your purchase: we keep it as a sales record the law requires us to keep (for 10 years from the purchase, as payment records), and it stays when you delete your account, so the places left stay right.
On your device
| Name | Kind | Purpose | Lasts |
|---|---|---|---|
__Host-nemudoro_session | Cookie | Keeps you signed in. It holds a random key to your sign-in and nothing else, and scripts on the page cannot read it. | 30 days, or until you sign out |
| Session, inside Discord | Page memory | The same kind of key, kept by the page instead of in a cookie, because Discord's window does not allow one. | Until you close Nemudoro in Discord, and at most a day: then the page gets a new one from Discord |
| Sign-in state | Cookie | Protects the sign-in with Discord against forgery. | 10 minutes |
| Volume levels | Local storage | Remembers your music and sound volumes. Never sent to us. | Until you clear it |
| Visual effect | Local storage | Remembers which visual effect (rain, snow, leaves, stars) you left on. Never sent to us. | Until you turn it off or clear it |
| Last background | Local storage | Remembers which painted room you last saw, and its lighting, so it appears at once when you come back. Never sent to us. | Until you sign out or clear it |
| Alert and keyboard settings | Local storage | Remembers whether the end-of-session chime, notifications and single-key shortcuts are on, and when this browser last chimed (so several open tabs chime once). Never sent to us. | Until you clear it |
All of these are strictly necessary for the app to work. There are no advertising, analytics or tracking cookies.
Technical data
Like any website, Nemudoro's host, Cloudflare, receives your IP address and browser details with every request. This is needed to deliver the site and protect it from abuse. Our request logs are kept for up to 7 days (the retention of Cloudflare's Workers Logs), to fix errors.
When a request is refused for coming too fast (rate limiting, which stops anyone guessing sign-in codes or flooding an inbox), a security log records the IP address it came from, the page it asked for and which limit refused it. These entries are part of the same logs and are deleted with them, after at most 7 days.
The same security log records sign-ins and sign-outs, failed sign-in attempts, sign-in codes sent, and sign-in methods added to or removed from an account: what happened, the IP address, and a pseudonym for the account or email address (a code derived from it with a secret key, so the log alone cannot be traced back to you). It never records your email address, your Discord details, sign-in codes or session tokens. We use it to detect and stop attacks on accounts (our legitimate interest in keeping the service secure). It is deleted with the other logs, after at most 7 days.
If the page hits an error it cannot handle, it sends us the error message and where in our code it happened, with the page's
address (never the part after a ?). Anything that looks like an email address or a long number is removed before it is
logged. These reports are kept with the other logs, for at most 7 days, to fix the app.
3. Why we use it
- To run Nemudoro for you: timing your sessions, awarding Sleep Points, growing your companion, and keeping your progress the same wherever you open Nemudoro. This is necessary to provide the service you asked for.
- To keep it secure and working: preventing abuse and fixing errors. This is our legitimate interest in running a safe service.
- To give you what you paid for: matching Ko-fi payments and Discord purchases to your account, keeping your membership on, counting the limited places, and handling refunds and disputes. This is necessary to perform our contract with you.
- To keep records of sales that the law requires a seller to keep, for accounting and tax. This is a legal obligation.
We do not use your data for advertising or profiling, and we never sell it.
4. Who else handles it
- Cloudflare hosts Nemudoro and stores its database and files, as our processor. Cloudflare's privacy policy.
- Cloudflare Email Service delivers sign-in codes and account notices to your email address, as our processor.
- Discord handles sign-in, and inside Discord it carries Nemudoro's traffic through its own proxy. Discord's privacy policy.
- Ko-fi takes payments for Premium. It is a separate controller of what you give it (your name, email address, message and payment details), under Ko-fi's privacy policy, and it works with payment providers of its own. We receive from Ko-fi only what is described in section 2.
- Discord also sells Premium inside the Activity, as a separate controller of your purchase and payment details, under Discord's privacy policy. We receive from it only the tiers you hold.
Nemudoro's fonts and code are served from nemudoro.com itself, so your browser contacts no one else.
These providers may process data outside your country, including in the United States, under their own safeguards for international transfers.
5. How we protect it
- Everything travels over encrypted connections (HTTPS).
- Your sign-in cookie is a long random key that cannot be guessed, and scripts on the page cannot read it. Signing out ends the sign-in on our side too, so a copy of the cookie stops working.
- Your data sits in Cloudflare's database and storage. Only Nemudoro's own code and its operator can reach it; the storage has no public address.
No system is perfectly secure. If we ever learn of a breach that puts your data at risk, we will act on it and tell those affected, as the law requires.
6. How long we keep it
Your progress and history are kept for as long as you use Nemudoro, so your companion and streak are still there when you come back. They are deleted when you delete your account, or ask us to (see below). Cookies and logs expire as described above.
Your support code, memberships (including those bought in Discord) and payer fingerprint are kept while your account exists, and deleted with it. Payment records are kept for 10 years from the payment, as sales records the law requires us to keep. When you delete your account, they are kept for that time but no longer linked to you: the account and the payer fingerprint are removed from them.
7. Your rights
You can ask us to:
- see the data we hold about you, or get a copy of it;
- correct it;
- delete it, which permanently erases your progress and history;
- stop or limit how we use it.
You can do two of these yourself, on the website under Settings → Account (inside Discord, open nemudoro.com):
- Download my data saves a copy of everything we hold about your account as a JSON file: your settings and progress, every focus and break session, your quests, your sign-in methods (your email address and Discord user ID), your current sign-ins (the kind of device and the dates, never the sign-in keys themselves), and, if you support Nemudoro, your support code, your memberships, the records of your payments, whether a Ko-fi payer is linked to your account and when we last asked Discord about your purchases. It also includes the session running at that moment, if any, and what the last one earned while the app was closed (kept for 24 hours).
- Delete my account permanently erases your companion, points, history, quests, sign-in methods, support code, memberships and payer fingerprint, and any sign-in code waiting for your address, and signs you out on every device. Any membership ends with it. Payment records stay for the time above, no longer linked to you. You type DELETE to confirm. For your safety it needs a sign-in from the last 10 minutes: if yours is older, you are asked to sign in again first. It cannot be undone. Copies in our logs (section 2) expire with them, after at most 7 days; Cloudflare's database recovery history keeps a copy of the database for up to 30 days, which we use only to recover from a failure.
For anything else, or if you cannot sign in, email hello@nemudoro.com and include the email address you sign in with, or your Discord user ID. Before acting, we confirm the account is yours: for an email address, by sending a sign-in code to it; for a Discord account, by asking you to sign in to Nemudoro with it. We will reply within one month. You can also complain to a data protection authority: in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), or the authority where you live.
Signing out ends that sign-in and removes its cookie. Settings → Sign out everywhere ends every sign-in, on all your devices and in Discord. To disconnect Nemudoro from your Discord account, open Discord's User Settings → Authorized Apps.
8. Children
Nemudoro is for people aged 13 or over, however they sign in. We do not knowingly collect data from anyone younger. If you believe a child has used Nemudoro, contact us and we will delete their data.
9. Changes to this policy
If we change this policy, we will update the date at the top of this page. If we ever want to collect something new, we will describe it here first.
10. Contact
Questions about your privacy: hello@nemudoro.com.