Privacy Policy
What NTPL.cc does with your personal data: what is collected, why, who receives it, how long it is kept, and the rights you have over it.
Last updated: 13 November 2026
The rules of using the service are in the Terms of use.
1. Who is responsible for your data
NTPL.cc — Notion Gallery Sync, the service that keeps the pictures on the cards of a Notion gallery up to date — is the controller of the personal data described here. We decide what is collected and why.
We are a small business and we do not have a Data Protection Officer: a company of our size does not need one, and the law does not require us to appoint one. If you have a question about this notice, write to us at support@ntpl.cc and it reaches the person who runs the service.
2. What we collect
We collect as little as the service can work with. Here is the whole list.
| What | When | Why |
|---|---|---|
| Your email address | When you connect a gallery or create an account | To send you the temporary password, to let you sign in, and to give you the upgrade you paid for. Receive news, offers and statistics about NTPL.cc and its template. |
| Your Notion API token | When you connect a gallery | To write the covers on your cards. It is encrypted before it is stored and it never leaves our servers in a readable form. |
| Your account password | When you create an account | Only in hashed form. We cannot read it and we cannot send it back to you. |
| Your pictures | When you upload them | To make the covers, and to put the background behind the person. |
| The country of your browser | On every page | To count the visits. It is the region of your language — nothing more. See section 7. |
| The kind of browser and device | On every page | To count the visits. Only the family — "Chrome", "Safari", "Firefox" — never the exact version. |
| Where you came from | On every page | To count the visits. Only the name of the site, never the whole address of the page. |
| Your payment details | When you pay | We do not receive them. Paddle is the merchant of record and takes the payment. We only learn that a payment succeeded, and which plan it was for. |
What we do not collect. We do not read your gallery contents, we do not follow you around the web, and we do not send your pictures to any outside service. Your pictures stay on our own servers, in Germany. The one exception is a picture you ask us to make a cover with an AI cover — and then only the text you wrote is sent, never the picture.
3. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running the service: signing you in, keeping your gallery connected, making your covers, taking your payment | Performance of a contract (Art. 6(1)(b)) — this is what you pay for. |
| Answering you, giving the support, recovering an account | Performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) in running a working service. |
| Counting the visits, so we know which pages are used | Legitimate interests (Art. 6(1)(f)) — understanding how the service is used, without identifying anyone. See section 4. |
| Stopping abuse: too many attempts to sign in from one place | Legitimate interests (Art. 6(1)(f)) — keeping the service available. |
| Sending you the news, the offers and the statistics about NTPL.cc and its template | Consent (Art. 6(1)(a)) — you agree to it on the register form, and you can change your mind at any time by writing to us. See section 8. |
| Loading the checkout script of Paddle | Consent (Art. 6(1)(a) and ePrivacy Art. 5(3)) — see section 4. You can refuse, and the service still works. |
Where we rely on legitimate interests, the interests are ours and a third party's: to run a service that works, to keep it safe, and to understand which parts of it people use so that we improve the right ones.
4. Cookies and scripts
The short version: we set no cookie for tracking, no analytics cookie, and no advertising cookie. There is one cookie that keeps you signed in, and it is necessary. There is one third-party script, and we ask before we load it.
The counting of the visits
We count the visits ourselves, with a small script that is served by this same service. It:
- sets no cookie;
- writes nothing into your browser — no local storage, no session storage, no fingerprint;
- does not read anything about the other sites you visit;
- talks to no server other than this one.
To count a visit as one person rather than as many, we make a hash of your address and the salt of the day. The hash cannot be turned back into an address, the salt changes every day, so the visitor of Monday cannot be linked with the visitor of Tuesday, and the rows that hold it are deleted after two days. What is kept for good is the count — "four visits from Italy on Tuesday" — and a count is not a person.
Your country comes from your own browser, not from your address: the browser knows the region of its language, and that region is the country. We do not ask any service where you are, and we do not keep your address in any form.
The cookies that keep you signed in
| Name | What it is | How long |
|---|---|---|
| gvo_account | A signed identifier that keeps you signed in to your account. It is set by the server, it is marked HttpOnly and SameSite, and no script of another site can read it. |
Until you sign out |
| gvo_playground | The same thing for the 24-hour trial, so the trial can be yours and not the next person's. | 24 hours |
| gvo_admin | The session of the person who administers the service. Only one account has it, and it is never given to a visitor. | Until it is closed |
| ntpl_consent | Your answer about the third-party script: "yes" or "no", and the version of the list it was given about. Nothing else — no identifier. | One year |
The first three are strictly necessary: without them, a service you have paid for cannot know that you are you, and the trial cannot be yours alone. That is why they need no separate permission. We are telling you about them anyway, because they should not be a hidden thing.
The third-party script, and your choice
To open the checkout we use the script of Paddle, which is the company that
takes the payment. Their script is loaded from cdn.paddle.com, it reads things out
of your browser, and it is outside the European Union. So we ask you first, in a banner at the
bottom of the page.
- The two buttons — Allow and No, thanks — are the same size and equally easy to press.
- If you say no, the script is never loaded. Your browser never talks to Paddle. You still get the whole service; the only thing that changes is that the checkout window does not open, so write to us and we will give you the upgrade by hand.
- If you say yes, the script is loaded and the checkout works as it should.
- You can change your mind at any time — the button below asks you again and forgets the old answer.
5. Who receives your data
These are the companies that receive something from us. They are the ones we call sub-processors. We have listed them because the law asks us to.
| Company | What they receive | Where |
|---|---|---|
| Hetzner Online GmbH | Our servers, your pictures, your account | Germany |
| Supabase | Your account: email address, hashed password, and the record of your sign-ins | Their cloud region |
| Notion Labs, Inc. | What you put in your own Notion database, and the covers we write on it | United States |
| Cloudflare | Storage for your pictures and covers | Global network |
| Google (Firebase) | Your account session | Global network |
| Paddle | Your email address and the payment, if you allow the checkout script | United Kingdom / European Union |
| Zoho | Your email address, for the mails of the service | United States / India |
| Unsplash, Tumblr | Only what you type in the picture picker — never your data | United States |
| Replicate | Only the text you wrote for an AI cover — never your pictures | United States |
We do not sell your data, and we do not give it to anyone for advertising. There is no advertising network on this site.
6. Transfers outside the European Union
Some of the companies above are outside the EU, and their servers may be outside it too. When your data goes to them, the transfer is covered either by the European Commission's standard contractual clauses — the contract the Commission has approved for exactly this — or by another lawful mechanism. You can ask us for a copy of the safeguards we use, and we will give it to you.
7. How long we keep it
| What | How long |
|---|---|
| Your account and your gallery connection | Until you close your account, or the plan ends and the account is not used. |
| Your pictures and their covers | Until you delete them, or the plan ends. |
| The record of a sign-in | The hash of the address is kept for two days, for the rate limit. The fact that you signed in is kept in the shared ledger of our own applications. |
| The count of the visits | The visit rows are deleted after two days. The counts are kept — a count is not a person. |
| Your consent answer | One year, or until you change it. |
| Your consent to the news and the offers | Until you change your mind. You can withdraw it at any time by writing to us, and we stop. |
| The records of a payment | As long as the tax law requires us to keep them. |
| Server logs | Short, and never containing the contents of your gallery. |
8. Your rights
You are the person whose data this is, and the law gives you these rights:
- Access — a copy of the data we hold about you.
- Rectification — to have wrong data corrected.
- Erasure — to have your data deleted.
- Restriction — to have us pause the use of your data.
- Portability — to get your data in a machine-readable form.
- Objection — to object to processing based on legitimate interests, and to processing for direct marketing. When you object, we stop.
- Withdrawal of consent — to withdraw your consent at any time, without affecting what was lawful before the withdrawal.
- Complaint — to complain to a supervisory authority. See section 13.
To use any of these, write to support@ntpl.cc. We answer within 30 days, and we do not charge for it.
9. How it is protected
- Passwords are stored only in hashed form — we cannot read them.
- Your Notion token is encrypted before it is stored, and the key is separate from the data.
- All traffic is encrypted with HTTPS.
- The session cookie is marked
HttpOnlyandSameSite, so a script of another site cannot read it. - Your pictures are stored under a name derived from a hash, not under your email address.
- Access to the service is limited to the people who run it, and the keys are kept outside the code.
10. Automated decisions
There are none. No decision about you is made by a machine, and there is no profiling. The service does not score you, does not classify you, and does not decide anything about you.
11. Children
This service is for people who run their own Notion gallery. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you think we have data of a child, write to us and we will delete it.
12. Changes to this notice
When this notice changes, the date at the top changes with it, and the new one is published here. If a change touches what we do with your data, we will tell you by mail.
13. Contact, and where to complain
For anything in this notice, write to support@ntpl.cc. It reaches the person who runs the service.
If you think we have not answered you properly, you can complain to the supervisory authority. The service is run from Romania, and the authority there is the National Supervisory Authority for Personal Data Protection (Autoritatea Națională de Supraveghere a Protecției Datelor Personale — ANSPDCP), with its address at Bulevardul Dr. Gheorghe Marinescu nr. 59–61, sector 1, Bucharest, and at anspdcp.ro. You may also complain to the authority where you live.