Privacy policy

Last reviewed: 31 October 2026

NoteStream ("we", "us") lets event hosts collect anonymous questions, feedback and poll answers. This policy explains what we collect, why, and the choices you have. We process personal data in line with the Nigeria Data Protection Act 2023 and, for visitors from the EU and UK, the GDPR.

If you answer an event (attendees)

We don't ask for your name, email or an account. Your host can't see who you are.
We store your answers and the time they arrived (rounded to the minute in exports).
To stop spam and repeat responses, we keep scrambled, one-way codes made from your device and connection details. They are unique to each event, can't be turned back into the original details, are never shown to the host, and are deleted with the responses.
If the event shows questions to the audience, your upvotes are stored the same way and can't be linked to the questions you asked.
We use Cloudflare Turnstile, a privacy-friendly check that tells people and bots apart.

Please don't include personal details in your answers — whatever you write is shown to the host, and possibly on screen at the event.

If you host events

Account details: your name, email address, and a securely hashed password — or your basic Google profile if you sign in with Google.
Your events: titles, descriptions, pictures, questions and settings.
Payments: Paystack processes your card or bank details. We receive only a payment reference, the amount and the outcome — never your full card number.
Emails we send you: sign-in links, receipts and reminders about your events. We record whether they were delivered, so we stop emailing addresses that bounce.

Cookies

Essential cookies keep you signed in, remember your device so the "one response per device" rule works, and remember an event code you entered. They don't track you across other websites.
Analytics cookies (such as Google Analytics) are used only on our website pages, and only if you accept them when asked. You can change your choice at any time with "Cookie settings" at the bottom of the page.

We don't sell personal data. We use these providers to run the service:

Cloudflare — hosting, storage and bot protection
Paystack — payments
Amazon Web Services (SES) — sending emails
Google — sign-in with Google, and website analytics if you accept it

We may disclose information if the law requires it. Because responses are anonymous, we usually hold nothing that identifies an attendee.

How long we keep data

Responses can be exported for 48 hours after a free event ends, or up to 168 hours for paid events. Responses and the scrambled codes are then deleted automatically 7 days later.
Host accounts are kept until you ask us to delete them. Payment records are kept as long as tax and accounting laws require.

Your rights

You can ask to access, correct or delete your personal data, object to or restrict how we use it, or ask for a copy. Email hello@notestream.link. You can also complain to the Nigeria Data Protection Commission (NDPC) or your local data protection authority.

Children

NoteStream is not meant for children under 13 to create accounts.

Changes

If we change this policy, we'll update the date at the top and, for important changes, tell hosts by email.

Contact

NoteStream — hello@notestream.link — https://staging.notestream.link