Privacy

This page describes, in plain language, what DownloadNest actually collects and stores today, and the controls you have over it. It is not a substitute for legal advice, and it has not been reviewed by a lawyer — it is a technically accurate description of how the product currently works, which we will keep updated as the product changes.

Before you sign in

The validation questionnaire and your free Validation Snapshot stay in your browser (in localStorage) and are never sent to our servers. If you close your browser or switch devices before signing in, that data does not carry over — it only exists on the device and browser you used.

Once you sign in

Signing in uses a one-time code emailed to you — there are no passwords. Once signed in, the following is stored in our database (Supabase), tied to your account:

• Your email address.
• Whether you've opted in to receive relevant validation guidance by email.
• Your business idea and the answers you gave in the validation questionnaire.
• The evidence you record while working through your roadmap — for example notes from customer conversations, competitor research, or evidence of demand or payment.

Any browser-stored data you had before signing in is copied into your account the first time you sign in on a device, so your progress isn't lost. If your account already has saved data, the saved data is kept and the browser copy is set aside rather than overwritten.

If you visit a public interest page

If you visit another DownloadNest user's published page (a link in the form /p/…), you can optionally submit your email address to express interest in their idea. If that page shows a test price, you can also optionally indicate that you'd pay that displayed amount. This is a willingness-to-pay signal only — no payment is ever charged or collected, and no card or payment information is ever requested.

Your email address, and whether you indicated you'd pay, is shared with the owner of that page so they can see who is interested. No account is created for you, and DownloadNest doesn't email you as a result. To request this data be removed, contact hello@downloadnest.com.

Who can see your data

Only you. Every table that stores your data enforces row-level security in the database itself, scoped to your account — this is enforced by the database, not just by application code. There is no elevated-privilege key anywhere in this application that could read or change another user's data, and no administrative back door around this.

Third parties

Supabase is our database and authentication provider, and the only third party involved in storing your account data. We do not sell your data, and we do not share it with any other company. Sign-in codes are sent by Supabase's email delivery on our behalf. DownloadNest does not use any analytics or advertising scripts.

If you're a project owner who has published a public interest page, visitors to that page (at a /p/ link) encounter one additional third party: Cloudflare Turnstile, which runs only on that one page, to verify a visitor is human before their interest submission is accepted. It does not track visitors across other sites and sets no advertising or tracking cookies.

Marketing emails

The "send me relevant validation guidance" option in your account settings is a preference, not an active subscription — we do not currently send any marketing emails. If that changes, it will only ever apply to accounts that have opted in, and you can turn it off at any time from your account settings.

Your controls

Available today from your account settings:

• Download my data — get a copy of everything tied to your account as a file.
• Clear my data — delete your business idea, roadmap progress, and recorded evidence. Your account and sign-in stay active.
• Delete my account — permanently delete your account and everything in it, including your email address. Signing in again afterward starts a completely new account.

Both removal actions require an explicit confirmation step and take effect immediately; neither can be undone once confirmed.

Cookies

DownloadNest itself uses cookies only to keep you signed in. On a published public interest page (/p/), Cloudflare Turnstile may also set cookies of its own, scoped to verifying that one visitor is human — not for advertising or tracking across other sites. There are no advertising or tracking cookies anywhere else on DownloadNest.

Questions

For anything about this page or your data, reach us at hello@downloadnest.com.