Privacy
We keep very little about you, we never sell it, and you can ask us to delete it at any time.
Draft. We are finalising this page before we open sales. Last updated .
The short version
- No advertising, no tracking cookies and no analytics on oncedone.app.
- If you join a waitlist, we keep your email only to send you one message when that page launches.
- If you buy a page, we keep what we need to build it and to look after it. Paddle handles your payment; we never see your card number.
- You can ask us to see, correct, export or delete your data by emailing support@oncedone.app. We answer within 30 days.
Who we are
OnceDone (oncedone.app) is a service that turns a short form into a live web page. We decide what happens to the personal data described on this page, and we are the person to contact about it.
OnceDone is run by Nimer Shamas (OnceDone). Contact: support@oncedone.app.
What we collect, and why
It depends on what you do.
- Just looking around oncedone.app: we store nothing about you.
- Joining a waitlist ("Tell me when"): your email address, the page you asked about and your language. We use it for one thing: to email you once when that page launches.
- Filling in the order form: as you type, we save a draft so you can come back to it: your email address, what you typed, the address you picked and your chosen style. It is deleted automatically an hour after your last change if you do not buy. The preview you see beside the form is drawn from what you type and is not stored anywhere by itself.
- Adding a photo or logo in the order form: the picture, made smaller in your browser (which also removes the camera details in it, such as where it was taken), stored for your page. If you do not buy, it is deleted automatically after 30 days.
- Buying an editable QR code (when sales open): the address it points to, your email address, an optional private note, and how many times it was scanned (a number: not who scanned it). We also store a fingerprint of your private edit link, never the link itself.
- Buying a page (when sales open): your email address, the content of your page (your name, text, links and images), and a record of the order (order number, amount, currency and status). We also store a fingerprint of your private edit link, never the link itself.
- Reporting a page: what you write, the address of the page and, if you choose to give it, your email address (see Reporting a page below).
- Writing to us through the contact form: your message, your email address so we can answer, and your name if you give it (see Writing to us below).
- Joining the list on someone else's OnceDone waitlist page: your email address and your language go to the owner of that page, who decides what to do with them. We store it for them, and we never use it ourselves.
- Visiting someone's OnceDone page: we show the page. We add one to a daily visit count for that page, which its owner can see: a number per day, with nothing about you (no address, no cookie, no device details). If you use its language switcher, your browser keeps one small cookie with your language choice (see Cookies below).
Like every website, the company that delivers our pages (Cloudflare) sees technical data such as your IP address and browser type, to deliver the page and to protect it from abuse.
Reporting a page
Every OnceDone page has a "Report this site" link. The report form asks which page and what is wrong. Everything else is optional: a few words, and an email address if you want a reply.
A person reads each report. We use it to decide whether the page breaks our Terms, and to reply to you if you gave an address. We do not tell the page's owner who reported it.
Writing to us
The contact form asks what it is about, your email address and your message. Your name is optional. A person reads each message and answers by email. We use your address for that answer and for nothing else.
Our notification to the owner says only that a message arrived and its topic: what you wrote and your address are not sent to any chat channel.
How long we keep it
| What | How long we keep it |
|---|---|
| Waitlist sign-up (email, page, language) | Until we send you the one email about that page's launch, then we delete it. Or sooner, if you ask. |
| An unpaid draft of your page | 1 hour after your last change, then it is deleted automatically. |
| Photos and logos you add (before you buy) | 30 days, then they are deleted automatically. After you buy, they are part of your page. |
| An editable QR code (where it points, your email, your note, its scan count) | Guaranteed for at least 5 years, and we delete it sooner if you ask. Before you buy, what you typed is deleted automatically an hour after your last change. |
| Your page and the content you gave us | For as long as your page exists. We delete it when you ask. |
| The record of your order (order number, amount, currency, status) | For as long as tax and accounting law requires us to keep it. |
| Your private edit link | We store only a fingerprint of it (a hash), for as long as your page exists. The link itself is never stored. |
| A report about a page (what you wrote, the page, your email if you gave one) | Until we have dealt with it, then for up to 12 months in case the page comes back or someone asks about it. Then it is deleted. |
| A message sent through the contact form (your message, your email, your name if you gave it) | Until we have answered it, then for up to 12 months in case you write again about the same thing. Then it is deleted. |
| An address on the list of a customer's waitlist page | For as long as that page exists. It is deleted with the page. |
| Technical logs at Cloudflare | As set out in Cloudflare's own policy. |
Your rights
Wherever you live, you can ask us to:
- show you the data we hold about you
- correct it
- delete it
- give you a copy you can take elsewhere
- stop using it for something you object to
Email support@oncedone.app. We answer within 30 days, and we may need to check it is really you first. If you are unhappy with our answer, you can complain to your local data protection authority.
Children
OnceDone is not aimed at children, and we do not knowingly collect their data. If you think a child has given us data, tell us and we will delete it.
Changes to this page
If we change what we collect or who we share it with, we update this page first, and we email customers about changes that matter to them. The date at the top shows when it last changed.
This page describes today's service. Where it says "when we open sales", that part is not running yet.