← Back

Data and Compliance

Last updated: June 1, 2026

This page describes how No Payne No Gain handles user data in relation to applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Our Data Position

No Payne No Gain is designed to be data-minimal by default. We do not collect personal data such as names, email addresses, or device identifiers. The Service does not require account creation and does not track individual users across sessions.

Data We Process

The only data processed by the Service is:

• Anonymous interaction counts — aggregate tap counts used to compute the global counter. These are not linked to any individual or device.
• Standard server logs — IP addresses and browser metadata retained briefly by our hosting provider (Vercel) for security and performance purposes, subject to Vercel's own data retention policies.
• On-device app data — streak, badges, Payne Points, and mission progress stored locally on your device. This data is never transmitted to our servers.

Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal basis for processing the minimal data described above is legitimate interests (Article 6(1)(f) GDPR) — specifically, operating and securing a fan website. We do not rely on consent because we do not collect personal data that would require it.

Your Rights Under GDPR

If you are located in the EEA, you have the right to:

• Access any personal data we hold about you
• Request correction or deletion of your personal data
• Object to or restrict processing of your personal data
• Lodge a complaint with your local data protection authority

Because we do not collect identifiable personal data, we are generally unable to locate records associated with a specific individual. If you have a concern, please contact us and we will respond within 30 days.

Your Rights Under CCPA

If you are a California resident, you have the right to know what personal information we collect and to request deletion of that information. We do not sell personal information. Because we collect no personal information as defined under the CCPA, most provisions are not applicable, but we are happy to respond to any inquiry.

Data Retention

Server logs retained by Vercel are subject to their standard retention period. Aggregate tap count data has no retention limit as it is not personal data. On-device data persists until you uninstall the app or clear app storage.

International Transfers

The Service is hosted on Vercel's infrastructure, which may process data in the United States and other jurisdictions. Vercel maintains standard contractual clauses and other transfer mechanisms as described in their Privacy Policy.

Contact and Complaints

For data-related enquiries, contact us at timpaynearmy@gmail.com. We aim to respond to all requests within 30 days. If you are unsatisfied with our response, you may escalate to the relevant supervisory authority in your jurisdiction.