No Nonsense Njuškalo

Privacy Policy

Last updated: 6 October 2026

In short: without sync, the extension sends no data anywhere. Sync is an option you enable yourself; it stores only encrypted records on our server that the server cannot read. No account, no e-mail, no analytics.

What the extension stores in your browser

The list of listings you have seen (listing id, title, URL, price and price history, date first seen, date deleted if you un-hid it), your settings and, if you enabled sync, your sync key. All of it lives in your browser and is deleted when you uninstall the extension; "Forget all" deletes the list of listings.

Sync between devices (optional)

Sync is off until you create a key in the popup or enter a key from another device. In Firefox the extension additionally asks for your consent at that point.

What is sent to the server. For every seen listing: a pseudonym of the listing (a cryptographic digest of the listing id computed with a key derived from your key), the time of the last change, a deleted flag and an encrypted blob. The blob contains the listing id, title, URL, price and price history and the date you first saw it. Additionally one encrypted record with your settings. Encryption (AES-256-GCM) happens in your browser with keys derived from your key; the key itself never leaves your devices.

What the server sees. How many records a key has, when they changed, which are deleted and how much space they take. The server cannot learn which listings you viewed, their titles or prices, who you are, or how many devices you use. The server does not keep your key, only a SHA-256 digest of an access token derived from it. There is no account, e-mail or password.

Where and for how long. The server is in Germany (Hetzner, Nuremberg). Operational logs are kept for 7 days and contain no IP addresses in their persistent form. Database backups, with the encrypted content, are made daily and kept for 30 days. The data of a key is deleted after 12 months without any request from that key; records of deleted listings are deleted 12 months after the deletion.

Deletion. In the popup, "Disconnect" with "also delete the data on the server" immediately deletes everything stored under your key. Because the server cannot identify you, deletion on request by e-mail is not possible without your key; deletion is therefore in your hands, in the popup.

Lost key. Without the key the data on the server becomes unreadable, to us and to you. There is no recovery, by design: any recovery would mean the server could read your data. Local data on each device remains.

Legal basis. Sync is processing based on your consent (by enabling it) and necessary to provide that feature. You withdraw consent by disconnecting. You exercise access, rectification, erasure and objection directly in the extension, since the data is readable only with your key, or via the contact below; you may also lodge a complaint with a supervisory authority.

What the extension does not do

Network activity

  1. To njuskalo.hr: when every listing on a page is already seen, the extension may load the next pages of the same list, one at a time with a pause, until it finds a new listing or the end of the list, to take you to the first page with new listings. This is the same as clicking "next page" yourself and can be turned off.
  2. To sync.nononsense.com.hr: only with sync enabled, as described above.

Permissions

Changes

Changes to this policy are published on this page with the date of the change, before the release of the version they apply to.

Controller and contact

Nikola Roić (the No Nonsense project), e-mail: info@nononsense.com.hr