What Randall knows, and who he tells.

What Randall collects about you

• Account basics— your name, email address, and a password (stored only as a hash; Randall couldn’t read it if he wanted to).
• Your commitments — titles, deadlines, optional stakes notes, check-ins, and misses. Misses go on your permanent record; that is the product.
• Settings — timezone, report severity, mercy window, appearance.

What Randall collects about people who never signed up

When you add a contact, you hand Randall a third party’s name and address — an email address, or a Discord webhook. Be clear-eyed about this: that person did not sign up. Randall treats their information accordingly:

• It is used for exactly one purpose: delivering the reports you asked for. It is never sold, shared, enriched, or used for marketing. Contacts are never added to any mailing list.
• For personally-addressed channels (email), the first and only unsolicited message is a single invitation. Reports flow only after the person explicitly accepts, on a page only they have the link to.
• Every message carries an opt-out link. Declining is immediate, permanent until they say otherwise, and requires no account.
• Their information is deleted when you delete the contact, or your account, or when they ask us directly.

Who else touches the data

Randall runs on a small set of processors, each seeing only what delivery requires: Vercel (hosting), Neon (database), and Resend (email delivery). Discord messages go to the webhook URL your contact’s server admin created. There are no ad networks, no analytics brokers, and no selling of anything to anyone.

Cookies

One session cookie, to keep you signed in. That’s the whole list.

Deleting everything

Settings → “Close the record” deletes your account and everything filed under it — commitments, contacts, reports, the permanent record — immediately and permanently. The record is append-only while your account exists, but it does not outlive you. Nothing is retained after deletion.

Your rights

Access, correction, export, deletion — whether the GDPR, CCPA, or plain decency applies to you, write to jwo.agyekum@gmail.com and it will be handled. This includes contacts who never signed up: if Randall has your address and you want it gone, same inbox, same result.

Age

Randall is not for children under 13, and does not knowingly keep records on them.

Changes

If this policy changes in a way that matters, the change is announced on the changelog before it takes effect. Randall doesn’t do quiet edits — that would be against everything he stands for.