Privacy policy
1. Operator
Ramon Landes, Zurich-area Switzerland. Contact: support@goalsandprogress.com.
2. What stays in your browser
Everything you type into the app: values, goals, milestones, journal entries. Stored in your browser's localStorage. I never see it.
3. What gets saved when you click Save
A .save JSON file downloads to your computer. You keep it. I never see it.
4. What gets synced when you connect Dropbox
The same JSON file syncs to your personal Dropbox app folder. I never see it.
5. What I do collect
Anonymous traffic data via Plausible: page view, country, device type, referrer, UTM. No cookies, no personal identifiers, no fingerprinting. Aggregated only.
6. Third-party content delivery networks
To keep the app fast, a few resources load from public CDNs the first time you visit. Each request gives the CDN your IP address and basic browser info (user agent, language). None of them see your goal-planning data.
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com): the DM Sans typeface. Google may log the IP address for traffic analysis. No cookies. Google's privacy notice. - Adobe Fonts / TypeKit (
use.typekit.net,p.typekit.net): the Loretta italic accents. Adobe may log the IP address. May set a font-serving cookie on its own domain. Adobe's privacy notice. - unpkg / Cloudflare (
unpkg.com, served via Cloudflare): Phosphor icons. Cloudflare may log the IP address. No cookies. Cloudflare's privacy policy. - Cloudflare CDN (
cdnjs.cloudflare.com): an on-demand image-export helper, only loaded if you click "Save card as image" on the wrap recap. Same privacy as above. - QR-code generator (
api.qrserver.com): only hit if you generate a QR code from the calendar reminder feature. Returns a PNG, sees your IP, no cookies.
If you want to load the app without contacting these CDNs, install it as a PWA (Add to Home Screen). After the first visit, the Service Worker caches the app shell locally and most repeat traffic stays on your device.
7. Senja.io feedback
When you submit feedback, you choose what to share. Senja.io hosts the form and stores the submission so I can read it. EU-aware data processing.
8. Dropbox sync (optional)
Only used if you connect it. The OAuth flow happens on Dropbox's servers; tokens are stored in your browser's localStorage. Your data file syncs into a private "Apps/Life Goals Program" folder in your own Dropbox. Dropbox sees what you tell it to sync. I do not.
9. Cookies
The app itself sets zero cookies. Plausible is cookieless. Senja and Adobe TypeKit may set cookies on their own domains when their script or font loads.
10. Your rights
Under Swiss FADP and GDPR: access, correction, and deletion of any personal data. Since I don't store personal data on a server I control, the answer to most requests is "I don't have any data on you". For Senja submissions and Plausible aggregates, email support@goalsandprogress.com and I'll act on it within 30 days.
11. Children
Not designed for under-16s.
12. Changes
I'll update this policy as the app evolves. Significant changes will be flagged in the changelog.