Privacy policy

Last updated: Sat, Oct 3, 2026

Who is responsible

Loïc MARTIN is responsible for your data. Contact: Not provided yet.

What we collect

  • As a guest, when you first answer or turn on reminders: a random identifier and your answers (Yes or No, and the day).
  • With an account: your username, your email, your password (stored only as a hash), your answers and, if you choose one in Settings, your language.
  • While signed in or playing as a guest: a session cookie; the server stores your IP address and browser type with the session.
  • With reminders on: the push address given by your browser, your timezone and the reminder hour.
  • If you use friends: your invitation code, your friendships (invitations accepted, confirmed or declined) and their dates.
  • If you use groups: the name of the groups you create, your memberships (role, pending, accepted or refused request, and their dates), the questions you write as an admin, and your answers to group questions (Yes or No, and the day).

Why, and on what basis

  • To provide the service you ask for (daily question, stats, streak, friends, groups, sync across devices, reminders, password reset emails): performance of the service.
  • To keep sessions secure (IP address and browser type): legitimate interest.
  • The percentages shown to everyone are anonymous totals. No advertising, no tracking, no profiling, no sale of data.

How long

  • Account: until you delete it. Your answers are then anonymized: they stay in the Yes/No totals but are no longer linked to anyone.
  • Guest data: deleted after 13 months without activity, answers anonymized the same way.
  • Sessions: expire 7 days after the last use, then deleted within a day.
  • Password reset links: expire after 1 hour, then deleted within a day.
  • Reminders: until you turn them off, your browser revokes them, or your data is deleted.
  • Friends: a friendship is deleted when either of you removes the other or deletes their account. A declined request is kept, to prevent new requests, until one of the two accounts is deleted. Your invitation code is replaced as soon as you ask for a new one.
  • Groups: your answers to group questions are deleted with your account, not anonymized, since in a small group an anonymous answer would still be recognizable. If you leave a group or are excluded, your membership is deleted and your answers are no longer shown there; they stay stored until your account or the group is deleted. A refused request is kept until an admin accepts it after all, or until your account or the group is deleted. The questions you wrote stay in the group, without your name, after your account is deleted. A group is deleted, with its questions and answers, when its owner deletes it or its last member leaves.

Who else processes it

  • Hosting: Hetzner Online GmbH, Industriestr. 25 91710 Gunzenhausen, +49 9831 5050.
  • Your friends see your username and your answers, only to questions they answered too. Anyone who opens your invitation link sees your username.
  • Group members see your username, your role and your answers to the group's questions, only once they have answered themselves and for questions published since they joined. Group admins see your join request and the author of queued questions. Anyone who opens a group link sees its name, its member count and its owner's username.
  • Password reset emails: Not provided yet.
  • Reminders go through your browser vendor push service (for example Google, Apple, Mozilla or Microsoft), which may be located outside the European Union.
  • Question images may be loaded from third-party sites, which then see your IP address.

Cookies and local storage

Only what the app needs to work, so no consent banner: the session cookie (better-auth.session_token), your language (yano_locale), your background (yano_bg), the onboarding status (yano_onboarded), your theme in local storage (nuxt-color-mode), and an offline copy of the app (service worker). No analytics or advertising cookies.

Your rights

You can access, correct, export or delete your data, object to or restrict its use, by writing to Not provided yet. You can delete your account yourself from the Account page. You can also complain to the CNIL (cnil.fr).