Privacy

Last updated 15 October 2026.

The short version

The free check-up stays in your browser; we never receive it. The paid app uses a Year Reset account: you sign in with Google, we receive your Google account id and e-mail address, and your plan, goals, check-ins and reviews are stored on our server so that every device you sign in on shows the same. We use them only to run the app and to help you when you write to us; you can export them and delete the account at any time. Our own server keeps a normal access log and counts page views and completions without identifying you. Optional features include Duo pairing (check-in counts), notes you write to us and phone reminders, described below. Payments are handled by Polar.sh. Meta Pixel with the Conversions API and Google Analytics 4 measure which advertisements bring people here; they run only if you choose "Allow" in the consent bar, wherever you are. Year Reset is for adults (18+); we do not knowingly collect data from anyone under 18.

Your account and what it stores

Signing in uses Google (Google LLC) as the identity provider: Google tells us your account id, your e-mail address and whether it is verified, and Google learns that you signed in to Year Reset. We store those values, the times of your sign-ins and a session cookie (strictly necessary, valid 90 days, used for nothing else); we never receive your Google password or contacts. Your plan (area, goals, start date), check-ins, weekly reviews, archived blocks and two small preferences are stored on our server in Iceland, with the last ten versions kept so a sync mistake can be undone. Free check-up answers are excluded from account synchronization. Settings lets you export your plan and delete the account, which removes its active database records and retained plan versions. Restricted encrypted recovery archives can still contain earlier snapshots; the off-site archives are currently retained until manually removed, not automatically erased when an account is deleted. Contact hello@yearreset.com about a data-removal request.

What stays on your device

The free check-up is stored only in your browser. The app also keeps a copy of your plan in the browser you use, so it opens quickly and works for a moment without a connection; signing out removes that copy. You can export a backup file at any time from Settings, move a plan with a plan code, or delete everything in Settings.

Optional phone reminders

Phone reminders are off until you enable them and allow notifications in your browser. We store the selected time, time zone and a private notification registration linked to your account and one chosen device. Its endpoint and encryption keys are encrypted in our database. Web Push uses the browser provider’s push service (Google for the supported Chrome version); notification content is encrypted in transit and contains generic wording, never your goal titles or review text. Google receives the routing information needed to deliver it.

We check your current plan before sending and do not send the daily reminder if any current goal is checked that day. Android, connection and browser settings can delay or prevent display. A server acceptance is not proof that you saw it. Desktop-extension notifications are a separately enabled channel.

You can turn reminders off in Settings; this removes the active device registration. Signing out disconnects notifications linked to that session, and deleting your account removes active reminder records. Unused registrations expire after 90 days; limited dispatch records are kept for 30 days and operation receipts for 90 days. Older encrypted recovery archives follow the retention rule above. A random browser device identifier and pending operation identifiers stay locally to connect the correct phone and avoid repeating an uncertain action; they contain no goal text or notification endpoint. These reminders do not subscribe you to marketing.

Chrome extension

The optional “Year Reset — Goals & Progress” desktop Chrome extension uses your existing account to show goals and progress, save check-ins you choose, and optionally remind you of an unrecorded day or open weekly review. It connects directly only to yearreset.com. Chrome sends your existing secure sign-in cookie; the extension does not read or store cookie values, Google passwords, access tokens or contacts.

It processes your opaque account identifier, email, paid-access status and full plan state, including review text, ratings and archived blocks, in memory to preserve unrelated records when saving. A limited popup view is kept in Chrome session storage until browser restart or a failed refresh. Reminder settings and small delivery records are stored locally per account until you use “Turn off”, “Turn off all reminders on this computer”, or uninstall. They do not use Chrome sync storage. Account data saved on the server, retained versions and encrypted backups follow the retention rules on this page.

Notifications are off by default and require your permission. They contain generic text, not goals or review contents; Chrome must be running and online, and delivery is not guaranteed. The extension does not collect browsing history, inspect other websites, inject content scripts, run ads or analytics, or execute remote code. It does not sell user data, use it for unrelated purposes, or use it for creditworthiness or lending. Its use and transfer of user data adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

See the full Chrome extension privacy policy for permissions, local removal controls and further detail. Contact hello@yearreset.com for questions or data rights.

What we count on the server

Like every website, our server writes an access log: the page requested, time, IP address and browser type, kept for 30 days for security and capacity. The pages also send small signals (for example "a check-up was completed" or "a checkout button was clicked") with a random per-tab identifier that is not stored across visits. Our own server counts page views and completions without identifying you, whatever you choose in the consent bar. These signals contain no names, e-mail addresses or answers.

When you click a checkout button, our server keeps a short checkout record for 14 days so that a paid order can be matched to the page and advertisement it came from: the product chosen, the page and campaign parameters of your visit, your measurement choice, your browser type and IP address and, only if you allowed measurement, Meta's browser identifiers. It contains no answers or goals.

Measurement tools, only with your consent

To learn which pages and advertisements bring people to the site we may use two measurement tools: the Meta Pixel together with the Meta Conversions API (Meta Platforms Ireland Ltd.), which send Meta standard events such as page views, checkout starts and purchases, and Google Analytics 4 (Google Ireland Ltd.), which counts visits and the steps of the check-up and does not store full IP addresses. Wherever you are, neither tool is loaded until you choose "Allow" in the consent bar (since 13 October 2026 this applies to every visitor, not only to the European Economic Area and the United Kingdom); "Decline", or no choice, changes nothing in the tool or the app. After a purchase, Polar notifies our server and, if your measurement choice allows it, we send Meta a purchase event through the Conversions API with a hashed e-mail address, your browser type and IP address and Meta's browser identifiers, so the purchase can be matched to an advertisement. Meta's and Google's own handling of this data is described in their privacy policies.

You can change your choice at any time; a change to "Decline" stops both tools from the next page load. Change my choice

Duo pairing and notes

If you use Together pairing, the shared view contains only counts: check-in days in the block, check-in days this week, the current run, badge names and whether you checked in today, together with the calendar date of that state and a device label (for example "Android · 2027-01-02"). Two texts are shared only if you choose: the name you enter for your partner, and your goal titles while "Show my goal titles to my partner" is switched on in Settings (switching it off stops sending them). Free check-up answers stay in the browser. Your plan area, if-then and obstacle lines, and weekly reviews sync privately to your own account, but are not shared with your partner. The pair code links the shared views; leaving the pair deletes your shared entry, and a pair left with one member is deleted after 7 days.

Notes you send through "Write to us", the Feedback page or the optional in-app survey are stored on our server with the time, the page they were sent from, your browser type, a shortened hash of your IP address and, if you add it, your e-mail address. Each note is also forwarded to the administrator's Telegram account, so Telegram (Telegram Messenger Inc.) is a recipient of the note text and of the e-mail address you add. Notes are kept for 12 months.

The in-app survey remembers up to three app-use dates and its dismissed or submission state only in this browser, to time its invitation and avoid repeat submissions. Survey answers are sent only when you press "Send feedback"; your plan and check-ins are not attached. The optional e-mail is for a reply, not a newsletter subscription. Survey invitation state is not included in exported backups and is removed with "Delete my account" in Settings.

Payments

Purchases are processed by Polar Software, Inc. ("Polar") as merchant of record. Polar handles your payment details, taxes and invoice under its own terms and privacy policy; your purchase contract is with Polar. We receive the order details needed to match the purchase to your account and to support you (your e-mail address, the product, the order identifier). Access is matched by the e-mail you used at checkout to the verified e-mail of your Google account; a Duo purchase adds a second account through an invite code. After checkout the app sends nothing further to Polar. Order and webhook records are kept on our server for 24 months for accounting, refunds and support.

E-mail

If you write to hello@yearreset.com we keep the conversation to answer you and to handle refunds. We do not send newsletters and we do not add buyers to a mailing list.

How long we keep server data

• Active account data (Google account id, e-mail, sign-in times, your plan and its last ten versions): until you delete the account. Encrypted off-site recovery archives may retain older snapshots until manually removed, as explained above.
• Sessions: 90 days from the last sign-in, or until you sign out.
• Feedback notes: 12 months.
• Order and webhook records from Polar: 24 months.
• Duo pair data: until you leave the pair; a pair left with one member is deleted after 7 days.
• Checkout attribution records: 14 days.
• Server access logs: 30 days.

Who we are and your rights

Year Reset is made by an independent developer resident in Iceland, who is the controller for the server data described on this page. For anything held about you (your account and plan data, support e-mails, notes, order details received from Polar), you may ask for access, correction or deletion by writing to hello@yearreset.com. You may also complain to the Icelandic Data Protection Authority (Persónuvernd) or to the supervisory authority where you live. Data that lives only on your device (the free check-up) is under your control and not ours.

Changes

If this page changes, the date at the top changes with it. Material changes are announced on the site.