Privacy

Last updated 20 October 2026.

ninjas is the website and app of a small team in Helsinki. This page says what we keep about you, why, and what you can ask of us. We don't sell data, show ads or track you across other sites and apps.

Who we are

ninjas is run by losem (Moustafa Mesbah), Helsinki, Finland. Questions and requests: moustafa.mesbah@gmail.com.

If you read the website

No account, no cookies, no analytics. Like any web server, ours sees your IP address and browser in each request; Google Cloud keeps these request logs for 30 days so we can find faults and abuse, and then deletes them.

If you are a team member

Only people the team has invited can sign in, with their Google account. Then we keep:

• Your account: your name, email address and Google account id, from Google when you sign in, and your role on the team. Your email address is never shown publicly.
• What you write: your profile (headline, bio, skills, links, experience, picture), projects, status updates, drafts and posts. Your profile, published posts and public projects are on the public website; that is what they are for. Drafts and hidden projects are not public.
• On your phone: drafts you write are stored on the phone until they are sent; the app also keeps your sign-in, through Google's Firebase.
• Notifications: if you turn them on, a notification address for your phone (a Firebase Cloud Messaging token) and whether it is Android or iOS. It is deleted when you turn notifications off, sign out or uninstall the app.
• Crash reports: when the app crashes or meets an error it can't handle, it sends a report (the error, app version, phone model and system version, and a random id for the installation) through Google's Firebase Crashlytics, so we can fix it. Reports are kept for 90 days.

We keep this because you are part of the team and use its tools (the legal basis is our legitimate interest in running the team's website and app).

Where it is kept, and who helps

Our server and database run on Google Cloud in Finland (europe-north1). Sign-in, notifications and crash reports use Google's Firebase services, which may process data outside the EU under Google's data processing terms and the EU standard contractual clauses. Nobody else receives your data.

How long

As long as you are on the team. When you leave, a team owner removes you: you can no longer sign in, and on your request we delete your account data and profile. Posts you published are deleted too, unless you ask us to keep them. Database backups are kept for 14 days, so deleted data is gone from them two weeks later.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it; most of it you can also edit yourself in the app. Write to the address above. If you think we handle your data wrongly, you can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Changes

If this page changes, the date at the top changes too; members hear about important changes in the team.