1. Overview & Data Architecture
Nexus Hub ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. Nexus Hub operates as a local-first web application designed for productivity, focus timing, task management, and ambient soundscapes.
Our application processes data using a hybrid local-first architecture. Primary workspace data is retained locally in your web browser, with optional cloud synchronization when authenticated.
2. Local Storage Usage
Nexus Hub utilizes browser localStorage to deliver a seamless offline-capable workspace experience. The following key datasets are saved locally on your device:
- nexus_tasks: Your Kanban tasks, status, priorities, and descriptions.
- nexus_notes: Markdown scratchpad content and personal notes.
- nexus_settings: Timer durations, active themes, audio volumes, and preference toggles.
- nexus_sync_queue: Offline mutation queue awaiting cloud synchronization.
- nexus_cookie_consent: Your cookie consent preferences (accepted / rejected).
Local storage data remains on your device unless you sign in to a cloud-synchronized account.
3. Supabase Authentication & Cloud Synchronization
When you register or sign in to Nexus Hub, user authentication and cloud synchronization services are powered by Supabase (PostgreSQL Database and Supabase Auth API).
- Authentication Credentials: Your email address and hashed passwords are encrypted and managed securely via Supabase Auth APIs. We never store plaintext passwords.
- Row Level Security (RLS): Cloud tables (profiles, tasks, notes, focus_sessions, user_achievements) are protected by strict PostgreSQL Row Level Security policies. Your synced data is accessible strictly by your authenticated user ID (
auth.uid()). - Session Tokens: JWT session tokens are managed safely in memory and local storage using public Supabase Anon Keys.
4. Google AdSense & Third-Party Cookies
To support the development and free availability of Nexus Hub, we integrate Google AdSense for non-intrusive advertising.
- Opt-In Consent Requirement: In compliance with GDPR, ePrivacy Directive, and Google Publisher Policies, Google AdSense scripts and cookies are verifiably blocked from loading until you grant explicit consent via our Cookie Consent Banner.
- Advertising Cookies: If accepted, Google AdSense uses cookies to serve personalized or non-personalized advertisements based on your visits to this website and other sites across the web.
- Managing Ad Preferences: You may modify your ad preferences or opt out of personalized advertising by visiting Google Ad Settings or modifying your consent choice in Nexus Hub Settings.
5. Cloudflare Turnstile Bot Protection
We use Cloudflare Turnstile on authentication forms (Login / Registration) to protect our infrastructure from automated bot traffic and spam. Turnstile evaluates browser signals non-intrusively to verify human requests without visual CAPTCHAs.
6. Your GDPR Rights & Data Control
Under the General Data Protection Regulation (GDPR) and applicable privacy laws, you possess the following rights:
- Right of Access & Portability: You can inspect and export your workspace data at any time.
- Right to Erasure ("Clear Local Workspace Data"): You can instantly erase all locally saved browser data by clicking "Reset Workspace" in Nexus Hub Settings.
- Right to Withdraw Consent: You can change or revoke your cookie consent preferences at any time.
7. Contact Us
If you have questions regarding this Privacy Policy or your personal data, please contact us via our project repository or support channels.