Privacy policy

Who operates NookStore

NookStore is operated by JASP Dev, Serbia. Contact xportdao@gmail.com for privacy questions and requests. This policy covers nookstore.app. Independently hosted community apps have their own operators and policies.

Data we use and why

Guest calculations and generated QR codes stay in the current browser session unless you choose an account save. ChatGPT sign-in provides a Site-specific account identifier, email and, when available, your name. We use these details to identify your account, protect access and display your identity. NookStore does not receive your ChatGPT password or conversation history.

Account features store the results you save, shopping items and purchase history, QR codes, palettes, currency preferences and conversion history. Sharing stores invitation records and the identities and display names of list participants. Ratings associate a vote with your account. Creator submissions and feedback include the submitted text, your account name and email, status and moderation records. These details are needed to provide the features you choose and handle your requests.

For signed-in users, we record the account identifier, dates and tool category used to measure service activity. We do not record guest activity in this application database. Access controls, moderation and activity measurement support our legitimate interests in operating, securing and improving NookStore. You may contact us to object to processing where applicable.

Who can access data

Personal saves are not public. A person who accepts your shopping invitation can view and edit the shared current list; purchase history remains private to its owner. You can revoke access. The NookStore operator can review feedback and creator submissions, including the sender’s name and email. Public ratings show aggregates. Only details deliberately selected for a published community listing should appear in that listing.

OpenAI provides Sites hosting and ChatGPT authentication; Cloudflare provides the Worker and D1 infrastructure. These providers process technical connection information according to their own terms and privacy policies. Exchange rates are requested from Frankfurter without sending your NookStore account identity. Community apps run on their authors’ hosting. Opening or embedding one establishes a connection to that hosting and may expose your IP address and its own cookies or sign-in state. NookStore does not send it your saved account records. Hosting and email providers may process information outside Serbia; their infrastructure and applicable safeguards govern those transfers.

Browser storage and retention

We use browser storage and a language cookie for preferences, local creator drafts, public resource caching and temporary sign-in handoffs. The counter can keep an account-scoped pending-operation queue in tab storage to recover interrupted saves. The resource cache excludes private API responses, authenticated pages and OAuth. You can clear browser storage, but unsent edits or drafts may be lost. There are no advertising cookies added by this application.

Saved tool records remain until you delete them or request account-data deletion. Invitations have a seven-day acceptance period; expiration does not automatically delete their audit record. Creator submissions, feedback, ratings and activity records currently have no automatic deletion schedule and remain until removed following a request or an operational review. We retain data needed to resolve an open complaint or meet a legal obligation only for that purpose. Clearing browser storage or deleting an external ChatGPT account does not itself delete NookStore’s server records.

Your choices and requests

Use each tool’s delete controls and shopping access settings where available. For access, correction, a copy of your data, deletion, restriction or an objection, email xportdao@gmail.com. Include enough information to identify the NookStore account or record; never send a password or an authentication token. We may ask you to confirm account control before releasing or deleting private data. We will explain any lawful reason a requested record cannot yet be removed.

You may complain to the competent data-protection authority. In Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). Mandatory rights under applicable law remain available. We update this page when the service’s data practices change.

Name Lab

Name generation runs in your browser without sending each idea to a model or server. Guest favorites use this browser’s local storage until you remove them or clear storage. Account favorites store the names you choose and their save dates against your account; you can export or delete them in Name Lab. Importing guest favorites into an account is an explicit action.

When you request a registration check, NookStore sends the selected .com and .app domain names to the official Verisign and Google registry RDAP services. It does not send your account identity. Public registration results are cached briefly, for up to five minutes. Opening a search, registry lookup or trademark database link connects you to that external site under its own policy. Registration results do not guarantee availability or legal uniqueness.