Legal

Privacy Policy

Last updated: 22 September 2026

In short

v3x is an app for keeping your tasks, notes and saved places. We process the minimum needed to run the service. We do not read, sell, profile or process your content for advertising. A few features touch an outside service in order to work; each one is listed below.

What we process

  • Account data: name, email address, encrypted password, account language, time zone and plan. If you sign in with Google, the name and email address Google shares with us.
  • Content data: tasks, notes, due dates and times, repeat settings and labels.
  • Locked notes: a locked note's text is stored encrypted in the database. Your PIN is never stored in plain text; only a digest used to verify it is kept. While you are signed in, the PIN is held temporarily in your server-side session so you can open notes, and it is removed when you sign out.
  • Location data: the name, address, coordinates, optional short note and pasted map link of places you save in Places. These records are not encrypted. When you press «Use my location» your browser reads your position once; it is not stored unless you save the place, and there is no background tracking.
  • Files: files you attach to tasks and notes, with their names, types and sizes. Files are never kept at a public address; they are served only to their signed-in owner.
  • Session data: the devices you signed in from, a hashed session key, last use time.
  • Security logs: the time and IP address of successful and failed sign-in attempts.

Why we process it

Account data to provide the service and recognise you; content, location and file data to run the application itself; session and security records to protect your account against unauthorised access. Nothing beyond that.

Outside services

These services come into play only when you use the related feature. None of them receives the content of your tasks or notes.

  • OpenStreetMap map images: when you open Places or a location window, map images load in your browser directly from OpenStreetMap Foundation servers, which receive your IP address and the map area you view.
  • OpenStreetMap search (Nominatim): when you search for a place by name or drop a pin, the search text or coordinates are sent through our server, so those requests show our server's address rather than your IP. Results are cached for 30 days, not linked to your account, to keep things fast.
  • Map links: when you paste a shortened Google or Apple Maps link, our server requests that link to find the real address.
  • Directions: tapping «Directions» opens the place in Apple Maps or Google Maps on your device; from there that service's own terms apply.
  • YouTube and Vimeo: when you play a video in a task or note, the player loads from that provider (YouTube uses the reduced-cookie youtube-nocookie.com address). Nothing is requested from them unless you press play.
  • Sign in with Google: if you use it, Google verifies your identity and shares your name and email address with us.
  • Google Fonts: the site's typefaces load from Google servers, so your browser shares your IP address with Google.

Cookies and browser storage

We use technical cookies only: the one that keeps you signed in, and the optional «remember me» cookie. Interface preferences such as note text size are stored only in your browser and never sent to us. No advertising, tracking or profiling cookies, and no analytics scripts.

Where data is kept

Account, content, location and file data are kept on our own server in Türkiye. Access is limited to the authorised administrator and all connections are encrypted with TLS. The outside services listed above may operate servers abroad.

How long we keep it

Your data is kept for as long as your account exists. Deleting your account deletes your tasks, notes, places, labels, uploaded files and account details. Security logs are kept for at most 12 months and the map search cache for at most 30 days. A deleted record may remain in regular backups for a while.

Your rights

You may access, correct, delete and export your data. You can export all your data as a single file and delete your account directly from the panel; locked notes are not exported in readable form. For anything else write to destek@v3x.org and we will answer within 30 days at the latest.

Changes

If this text changes the date above changes with it, and we email you about anything significant.