Privacy notice

Nxylet is a private notification forwarder. The operator of this service is the controller. Cloudflare hosts the application, and Discord delivers the direct message. This notice is a plain description of the proof of concept, and it is not a formal legal opinion.

Signing in uses Discord's identify permission. Nxylet stores your Discord user id and username so it can send you a DM and show this dashboard. It does not ask Discord for your email address, and it does not store your display name, avatar, or the servers you belong to.

Your notification address is a random local part. Forward ChatGPT task mail to it from a relay alias when you can. If a mailbox forward puts your personal address in the envelope or headers, the worker can see it in memory and then discards it. It is not stored. Cloudflare's own email logs may still be visible to the account operator.

If you connect a Yahoo mailbox, Nxylet stores that email address and an encrypted app password so it can read ChatGPT task messages from the inbox. Disconnecting or deleting the account removes that password from the database. D1 Time Travel can still recover deleted data for up to 7 days on the free plan.

Notification text and links are kept for 72 hours so you can see recent deliveries, then deleted. Delivery status without the text is kept for 30 days. Deleting your account removes your rows immediately. Cloudflare D1 Time Travel can still recover deleted data for up to 7 days on the free plan.

Task emails usually contain a completion notice and a link, not the full ChatGPT result. Nxylet forwards only the text and links that arrived. Calendar events are written by an administrator. Other people cannot see your subscription, and you cannot add personal events or share notifications.

Use Nxylet only for reminders you are willing to have processed briefly. Do not forward anything you would not want handled this way.