Privacy Policy

Last updated: November, 2026

This Privacy Policy describes how matejcho collects, uses, and protects your personal data. We are committed to transparency and protecting your privacy.

1. Data We Collect

We collect the following categories of data to provide the service:

Account Information
  • Email address, username, and password (securely hashed)
  • First name, last name, and date of birth (optional)
Sign in with Google

If you choose to sign in with Google, we receive your name and email address from your Google account. We use this information solely to create and sign you into your matejcho account. We never receive your Google password, and we do not access your contacts, calendar, files, or any other Google data. Information received from Google is never shared with third parties, never sold, and never used for advertising. Google's handling of the sign-in itself is governed by Google's own Privacy Policy.

User-Created Content
  • Notes, posts and code snippets you write
  • Reminders, tasks, comments and time entries
  • Saved links, favorites and connections
  • Who you shared each item with, and with what permission
  • File attachments and images
Technical Data
  • IP address (for security and fraud prevention)
  • Activity logs (page visits, actions taken)
  • Browser type and device information
  • Push notification subscriptions for the devices you enable them on

2. Cookies

Strictly necessary

These are always on. Without them the service cannot work, so they do not require your consent:

  • Authentication: To keep you logged in securely.
  • Anti-forgery: To protect against cross-site request forgery attacks.
  • Language preference: To remember your chosen language.
  • Theme preference: To remember your light/dark mode choice.
  • Cookie consent: To remember the choice you made below.

Analytics (optional)

Only set if you choose "Accept all". You can refuse them and use the whole service normally:

  • Visitor identifier: A single random first-party cookie so we can tell a returning visitor from a new one, and understand which parts of the site actually help people get started. It contains no personal information and is not readable by any script.

What we measure with it: which pages you visited and whether you went on to create an account. This is recorded in our own database on our own servers.

We do not use:

  • Advertising cookies
  • Third-party analytics services — nothing about your visit is sent to Google, Meta or anyone else
  • Social media tracking pixels
  • Cross-site tracking of any kind

How long we keep it

Detailed visit records are deleted automatically after the retention period; only anonymous daily totals are kept beyond that. Your activity records are included in the data export you can download from your account, and are deleted with your account.

Reopens the banner. Refusing analytics also deletes the identifier.

3. How We Use Your Data

  • To store and show you your notes, posts, reminders, tasks and code snippets
  • To deliver reminders and notifications in the app, by push and by email
  • To show shared items to exactly the people you chose
  • To authenticate you and secure your account
  • To send transactional emails (password resets, account verification)
  • To improve service quality and fix issues
  • To prevent fraud and unauthorized access

4. Data Sharing

We do not sell your data.
  • We do NOT sell or rent your personal data to anyone.
  • We do NOT share your data with advertisers.
  • We do NOT use third-party analytics services.
  • All infrastructure is self-hosted — your data stays on our servers.

The only exceptions:

  • If required by law (court order, legal process)
  • Content you choose to share, which is shown to the people or audience you picked

5. Your Rights (GDPR)

You have the following rights regarding your personal data:

  • Right to Access: You can request a copy of all data we hold about you.
  • Right to Rectification: You can update or correct your personal information at any time through your account settings.
  • Right to Deletion: You can delete your account and all associated data.
  • Right to Portability: You can export your data in a machine-readable format (JSON).
  • Right to Object: You can opt out of non-essential data processing.
  • Right to Restrict Processing: You can request we limit how we use your data.

To exercise these rights, contact us at: matej.gjozinski@gmail.com

6. Data Retention

  • Active accounts: Your data is retained as long as your account is active.
  • Deleted accounts: When you delete your account, there is a 30-day grace period to recover it. After 30 days, all data is permanently deleted.
  • Activity logs: Automatically deleted after 90 days.
  • Backups: Encrypted backups are retained for disaster recovery and automatically expire.

7. Security

We implement industry-standard security measures to protect your data:

  • Passwords are hashed using secure, one-way algorithms
  • All connections are encrypted with HTTPS/TLS
  • Database connections are encrypted
  • Regular security updates and patches
  • Rate limiting to prevent brute-force attacks
  • Account lockout after failed login attempts

8. Children's Privacy

matejcho is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. The 'Last updated' date at the top indicates when this policy was last revised.

10. Contact

If you have questions about this Privacy Policy or your personal data, please contact us: