Terms & Privacy

1About these terms

These terms are an agreement between you and Ongoing Things UG (haftungsbeschränkt) (“we”, “us”, “our”), the operator of nowwhat.page. They also cover our sibling domains deadphone.page, lostphone.page, stolenphone.page, recovery.page and others, which redirect here.

By creating a page or otherwise using the service you accept these terms. If you don’t agree with them, please don’t use the service.

2What nowwhat.page is

nowwhat.page gives you a recovery page at nowwhat.page/your-name that you can open from any browser - a borrowed phone, a hotel computer - to reach the information you need if your phone is lost, stolen, dead or inaccessible: who to call, which accounts to secure, and where your documents are.

You decide what goes on your page. The sensitive details are end-to-end encrypted (see the Privacy section below).

It is a personal convenience tool. It is not an emergency service and is not a substitute for calling your local emergency number, your bank, your insurer, your embassy or the authorities. We can’t guarantee you’ll be able to reach your page at any particular moment - you may have no internet access, for example.

3Who can use it

You must be old enough to enter into a binding contract where you live. If you are a minor, you may use nowwhat.page only with your parent’s or guardian’s consent, and they accept these terms on your behalf. By using the service you confirm this is the case.

4Your account and your keys

• You sign in by email magic link or a supported social login. Keep access to your email account secure - it is how you get back in.
• Your page is unlocked with your name plus a PIN or passcode that you choose. These never reach our servers. We do not store them and cannot reset or recover them.
• If you forget your name-as-set or your PIN/passcode, the encrypted content cannot be decrypted by anyone - including us. You would need to set the page up again. This is a deliberate part of the design, not a limitation we can work around.
• You are responsible for activity under your account and for keeping your login and your PIN confidential.

5Acceptable use

You agree not to:

• use the service unlawfully, or store or share content that is illegal, infringing, or that you have no right to store;
• store other people’s personal data without a lawful basis or their agreement;
• upload malware, or attempt to break, overload, scrape, reverse-engineer or otherwise circumvent the service or its encryption model;
• choose a page name that infringes a trademark, impersonates someone, or is registered in bad faith (for example to resell it);
• resell or provide the service to third parties, except as your plan allows (for example, pages for your household on a group plan).

We may remove content or suspend pages that breach this section.

6Your content

You keep all rights to what you put on your page. Because the sensitive parts are encrypted in your browser before they reach us, we can’t see them; we store and serve them only to provide the service, and you grant us the limited licence needed to host, process and deliver your page.

You are responsible for making sure your content is lawful and - importantly - for keeping it accurate and up to date. Out-of-date recovery details are your responsibility, not ours.

7Plans, prices and billing

Start free with a page on every domain, unlimited edits, and mandatory end-to-end encryption. Upgrade only when you want a name you'll remember.

We offer both monthly and yearly plans. The monthly plan is a flat price for a name of any length; on the yearly plan the all-inclusive price depends on how short - and scarce - your page name is.

The current plans, page-name prices and exactly what each includes are shown on our pricing page, and again in the checkout flow before you pay. Those are the authoritative prices.

Prices, tax and currency

Prices are shown in euros (EUR) and include any VAT or sales tax that applies to you - the price you see is the total you pay. Because tax rates depend on where you are, your receipt itemises the tax included in that total.

How you’re charged

You are charged the amount and on the cadence shown at checkout. Payments are processed by Stripe.

Renewal and price changes

Paid plans renew automatically at the end of each period, at the then-current price, until you cancel. We charge the payment method on file. If a charge fails we may retry and, if it keeps failing, suspend or downgrade the page. We may change prices or plans for future periods; we’ll give you reasonable notice before a change takes effect, and you can cancel before it does.

8Cancellation and refunds

You can cancel anytime from your account. Cancellation stops the next renewal; your plan runs until the end of the period you’ve already paid for.

Try before you buy, then immediate delivery

You can evaluate nowwhat.page in full before paying: guest mode lets you build and preview your entire page in the app, and a live demo page shows exactly how a published page looks and works. Paying is what takes your own page live.

Waiver of the 14-day withdrawal right (EU / EEA consumers)

Consumers in the EU/EEA normally have 14 days to withdraw from a digital purchase. Because you can try everything beforehand and what you buy is delivered immediately, at checkout you expressly ask us to begin straight away and acknowledge that you lose your right of withdrawal once we do. We begin as soon as your payment completes and your page is provisioned.

From that moment your purchase is non-refundable, except where the law still requires a refund - for example if the service is faulty or not as described. This does not affect your other mandatory statutory rights. If you think something has gone wrong, email us at hello@nowwhat.page and we’ll make it right.

9Your page name

A page name is a licence tied to an active subscription - not a property right. You don’t buy the name itself. Some words are reserved (system and common paths) and can’t be used.

What happens if your subscription ends

If you cancel, don’t renew, or we terminate for non-payment, we hold your page name for a grace period before anyone else can claim it:

• If you were on a monthly plan: 7 days after the subscription ends.
• If you were on a yearly plan: 30 days after the subscription ends.

After the grace period the name is released and may be registered by another user. We can’t guarantee it will still be available if you come back later. We may also reclaim or reassign a name that is unlawful, infringing, impersonating, reserved, or obtained in breach of these terms.

10Availability and changes to the service

We work to keep the service available, but we don’t promise it will be uninterrupted or error-free, and we may change, add or remove features. Features marked “coming soon” (such as QR recovery tags) are not guaranteed and are not part of what you’re paying for until they’re released.

11Suspension and termination

You can stop using the service and delete your account at any time. We may suspend or terminate access if you materially breach these terms, if the law requires it, or to protect the service or other people; where reasonable we’ll give you notice. On termination your page stops being served and the page-name grace period above begins.

12Disclaimers

The service is provided “as is” and “as available”. It is a convenience for storing and reaching your own information - it is not professional, legal, financial, medical or emergency advice, and not a substitute for official emergency services. You are responsible for keeping your details current and for keeping a backup of anything critical. We don’t warrant that you’ll be able to access your page at any particular time or place.

13Liability

Nothing here limits liability that cannot be limited by law - for example for intent or gross negligence, for injury to life, body or health, under the German Product Liability Act, or under any guarantee we expressly give.

Otherwise: for slight negligence we are liable only for the breach of an essential obligation (one you must be able to rely on to use the service as intended), and then only for foreseeable, typical damage; and our total liability for any other claim is limited to the fees you paid us in the 12 months before the event giving rise to the claim. We are not liable for the loss of data you did not back up, or for the consequences of losing your name or PIN.

14Changes to these terms

We may update these terms. We’ll post the new version here and, for material changes affecting an active subscription, give you reasonable notice (for example by email). Continuing to use the service after a change takes effect means you accept it.

15Governing law and disputes

German law applies, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, this does not remove the protection of the mandatory laws of your country of residence. Where permitted, the place of jurisdiction is Berlin.

The EU Commission provides an online dispute-resolution platform at https://ec.europa.eu/consumers/odr. We are not obliged, and are generally not willing, to take part in dispute-resolution proceedings before a consumer arbitration board.

16Contact

Questions about these terms? Email us at hello@nowwhat.page.

1Who’s responsible

The controller for your personal data is Ongoing Things UG (haftungsbeschränkt), Boyenstraße 36, 10115 Berlin, Germany. You can reach us at hello@nowwhat.page.

2What we collect, why, and our legal basis

Your recovery-page content - stored only as ciphertext

Everything you put on your page is encrypted in your browser, with a key derived from your name and your PIN/passcode, before it is sent to us. We receive and store only the encrypted result. We never receive your name or PIN and cannot decrypt or read your content. Basis: performance of our contract with you (Art. 6(1)(b) GDPR).

Account email

We use your email to create your login, send sign-in (magic-link) and service emails, and - on plans that include them - optional “remember your page” reminders you can turn off. Basis: contract; for optional product emails, legitimate interest or your consent.

Billing data

Payments run through Stripe. We don’t see or store full card numbers. We keep a Stripe customer/subscription reference, your plan, and invoice records. Basis: contract, and our legal obligation to keep tax and accounting records.

Usage analytics

We use Plausible Analytics - EU-hosted, cookieless, with no cross-site tracking, no fingerprinting and no storage of your raw IP address. Individual page names are masked before they reach analytics, so your handle isn’t exposed there. No cookie banner is needed because we set no analytics cookies and collect no personal data through it. Basis: our legitimate interest in understanding aggregate usage (Art. 6(1)(f) GDPR).

Technical logs and security

Our host, Cloudflare, processes basic request data to deliver and protect the site. Basis: our legitimate interest in security and reliability.

3What we don’t do

We don’t sell or rent your data, we don’t run behavioural advertising or profiling, and we don’t track you across other sites. Recovery pages are never indexed by search engines and are served fresh on every request (never cached at a CDN), so private content isn’t exposed publicly or through search.

4Who processes data for us

We use a small set of vetted processors under data-processing agreements, each handling only what its function needs:

• Stripe - payment processing.
• Plausible Analytics - cookieless, EU-hosted usage analytics.
• Cloudflare - hosting, delivery and security.
• Our email provider - delivering sign-in and service emails.

5International transfers

We prefer EU-hosted services. Where a processor (such as Stripe or Cloudflare) processes data outside the EU/EEA, that transfer is covered by an adequacy decision or the EU Standard Contractual Clauses.

6How long we keep it

• Encrypted page content: while your subscription is active, plus the page-name grace period, after which it is deleted.
• Account and email: until you delete your account (or after prolonged inactivity).
• Invoices and billing records: for as long as tax and commercial law require - in Germany, generally up to 10 years.
• Analytics: aggregate only, with no personal profile to retain.

7Your rights

Under the GDPR you can ask to access, correct, delete, export (port), or restrict our processing of your personal data, object to processing based on legitimate interest, and withdraw any consent at any time. Because we can’t read your encrypted content, requests about it are necessarily limited to the ciphertext we hold and to deleting it.

To exercise your rights, email hello@nowwhat.page. You can also complain to a supervisory authority - for us that is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

8Children

nowwhat.page is intended for adults and is not directed at children. If you are a minor, use it only with a parent’s or guardian’s consent (see the Terms). We don’t knowingly collect personal data from children without that consent, and will delete it if we learn we have.

9Changes to this policy

We’ll post any update here and change the “last updated” date. For material changes we’ll give reasonable notice.