GDPR · Your data

Privacy
policy.

We collect only what we need, use it only as described here, and keep you in control at all times.

Last updated: 8 October 2026
The bare minimumAn email address, your reason for joining and, if you wish, your expectations.
Never soldYour data is never sold, rented or used for advertising.
Deleted from the active spreadsheetNo later than 3 years after registration, or as soon as you unsubscribe.

1. Who is responsible for your data?

The data controller is Archange, publisher of the website and the app Nearly, Address not provided. For any questions about your data: support@hellonearly.com.

2. What data, for what purpose, and on what basis?

ProcessingDataLegal basisRetention
Waitlist : notifying you at launch and sending you Nearly updates.Email address, reason for interest, expectations (optional), registration date, version of the accepted policy.Your consent (GDPR Art. 6(1)(a)).Until you unsubscribe and no longer than 36 months after registration.
Product improvement : analysing your expectations to prioritise features.Reasons for interest and expectations, analysed as a group.Your consent (GDPR Art. 6(1)(a)).Same retention as the waitlist.
Beta and feedback : inviting you to try Nearly or answer a short survey.Email address, only if you ticked the optional box.Your separate consent (GDPR Art. 6(1)(a)).Until you withdraw this consent or unsubscribe.
Website demos (shared expenses, couple questions): running the demos in your browser.First names or usernames, expenses and drawn questions, kept only in your browser’s session storage. Nearly does not create an IP fingerprint.Operation of the demo you requested.Until the tab closes or session storage is cleared. Your browser may restore this session after restarting.
Security and hosting : running the website and detecting attacks.Technical logs (IP address, browser, date, requested page).Legitimate interest (GDPR Art. 6(1)(f)).According to the privacy policy of GitHub, the website host.

The form asks you to share no sensitive data (health, sex life or sexual orientation, opinions, religion…). If such information is nevertheless submitted in the “expectations” field, it will be deleted as soon as we become aware of it. Your answers are not used for automated decisions or profiling that produces legal effects.

3. How does your data move?

When you submit the form, your answers are sent over an encrypted connection (HTTPS) directly to our automation tool n8n. It checks the fields, consents and anti-bot proof before any registration. n8n records the registration in a private Google Sheets spreadsheet, unavailable to the public and accessed only by the Nearly team. Unsubscribing deletes the data in the corresponding row, and a daily task automatically deletes registrations older than 36 months.

These deletions apply to the active spreadsheet. Earlier versions may remain in the provider’s history or backups; their retention is managed separately. The thank-you email and personal link are also retained in the sender’s and recipient’s mailboxes; unsubscribing does not delete these copies.

4. Who can access it?

Only the Nearly team can access your data. It is hosted by providers acting only on our instructions (processors under GDPR Article 28):

  • Website hosting : GitHub Pages — GitHub, Inc. (https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement)
  • Automation : n8n (provider not provided)
  • Waitlist storage : Google Sheets (Google).
  • Anti-bot protection : Cloudflare Turnstile. Verification receives technical connection data and a temporary token; n8n does not send your form answers or email to Cloudflare.
  • Thank-you email : Gmail (Google), via n8n, after a new registration. The message includes your personal unsubscribe link; it does not include your form answers.

Your data is never sold, rented or transferred for commercial purposes. If a provider is outside the European Union, transfers are covered by an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses.

5. How is it protected?

Encrypted connections (HTTPS), anti-bot verification in n8n, strict validation of received data, spreadsheet access restricted to the team and personal unsubscribe links. We do not keep your name or IP address with your registration.

6. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights at any time:

  • Withdraw your consent, as easily as you gave it, without affecting processing already carried out;
  • Access your data and obtain a copy;
  • Rectification of inaccurate data;
  • Erasure of your data;
  • Restriction and objection to processing;
  • Portability : receive your data in a structured format (CSV);
  • Instructions after death about what happens to your data after your death.

To exercise these rights, use the form below or email support@hellonearly.com. We reply within one month. If you believe your rights are not being respected, you may lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr/plaintes).

7. Cookies and trackers

With your optional consent, Cloudflare Web Analytics measures visits, viewed pages, referring sites and technical performance (legal basis: GDPR Art. 6(1)(a)). Its script loads only after you select “Accept”. It does not use advertising cookies or track your browsing across different sites. Nearly sends no email addresses, form answers or personal unsubscribe links to this tool. Legal pages and URLs containing parameters are excluded from measurement.

Cloudflare receives the technical information needed for the request and provides aggregate statistics available for six months. This data is not linked to Google Sheets registrations. Your acceptance or refusal is stored in your browser’s local storage for 180 days, without a visitor identifier. You can change it at any time using “Analytics preferences” at the bottom of the page; withdrawing consent stops future measurement after reloading. Refusing does not block any website feature. About Cloudflare Web Analytics.

The website uses no advertising cookies. Demos use your browser’s session storage to retrieve data in the same tab. It is not sent to Nearly; you can clear it in your browser settings. After registration, a receipt containing your email address and personal unsubscribe link may be stored locally so you can retrieve that link. It is deleted when you unsubscribe; after 36 months it is no longer used and is deleted at the next visit. You can also remove it in your browser settings. Cloudflare Turnstile loads only when the form is enabled, to verify human interactions (Cloudflare privacy policy). For currency conversion, your browser queries Frankfurter : the provider receives currency codes and technical connection information, but no first names or expenses.

8. Minors

The waitlist is for people aged 15 or older, the age at which minors can consent independently to data processing in France. The app’s Spicy mode is strictly for adults.

9. Changes to this policy

We may update this policy, for example when choosing an email provider. The update date appears at the top of the page. Each registration records the waitlist consent version (current version: 2026-10-01); the analytics choice is separate. For significant changes to the waitlist, you will be notified by email before they take effect.