1. Who controls website data
Nagu Corporate Private Limited (“Nagu”, “we”, “us”) is the controller for personal data Nagu chooses to process through this product website.
Nagu Corporate Private LimitedContact location: Nagarbhavi, Bangalore, India 560072
General questions: hello@nagu.co
Privacy, legal and security: kj@nagu.co
2. What the website processes
The core website is static. You can read product information, installation instructions and this notice without creating a Nagu account or giving Nagu your ChatGPT credentials.
This product website does not connect to your desktop app or read its accounts, quota readings or LAN dashboard. Dashboard screenshots use illustrative accounts. Fonts and images are served with the website; the light/dark preview buttons only switch the displayed screenshot. Nagu does not sell personal data collected through this website or use it for advertising.
If you accept optional analytics, Google Analytics 4 may process information such as pages viewed, approximate time, referring page, browser and device category, broad geographic information and interactions with product links or download instructions. Internet services also receive ordinary request data needed to deliver and protect a page, such as IP address, requested URL, timestamp and user-agent information.
The site's exact analytics event allowlist is:
page_view, with only the allowlistedpage_pathmodal_open, with only the allowlistedmodal_namedistribution_selection, with only the allowlisteddistributiondownload_start, with only the allowlisteddistributioninstallation_guide_view, with no parameterslicense_view, with no parameterscontact_click, with only the allowlistedcontact_purposenagu_referral, with only the allowlistedplacement
Nagu does not attach free-form text, destination URLs or fields outside those fixed schemas.
Nagu does not intentionally send account email addresses, local account labels, authentication tokens, cookies from the desktop app, prompts, responses, local filenames, device-local app identifiers or other product secrets as custom analytics event data.
If you email Nagu, we process the address, message and attachments you choose to send so we can respond. Do not send access tokens, account cookies, auth.json files or other credentials.
3. Analytics consent and browser storage
Optional Google Analytics is off unless you select Accept analytics. Declining keeps it off. Your choice is stored in your browser so the site can remember it; this preference is necessary to apply your request and is not used for advertising.
You can withdraw consent at any time by returning to the home page, choosing Privacy settings in the footer and selecting Decline or withdraw. You can also clear this site's browser data. Withdrawal affects future processing and does not make processing based on earlier valid consent unlawful.
Where consent is the applicable legal basis, no Google Analytics tag is loaded before acceptance. After withdrawal, this site stops every allowlisted measurement event, including page_view and download_start, records the denied choice, disables the configured measurement property, removes its loader and does not reload that tag while the denied choice remains. The Codex Quota Monitor desktop app does not use this consent choice and remains telemetry-free.
Analytics cookies
After you accept, Google Analytics can set _ga and a property-specific _ga_<container-id> cookie. Google documents a default expiry of up to two years; browser settings, consent withdrawal and property configuration can shorten their practical lifetime. The site does not use advertising cookies.
4. Services, recipients and transfers
| Service | Purpose | When contacted |
|---|---|---|
| Firebase Hosting / Google | Processor/service provider used to deliver, secure and operate the static website | When your browser requests this website |
| Google Analytics 4 | Processor/service provider used, with consent, to understand aggregate site use, installation-guide engagement and product-link activity | Only after you accept optional analytics |
| GitHub | Independent external platform that provides release files and public documentation; GitHub processes requests under its own applicable terms and privacy notice | When you follow a GitHub link or begin an enabled release download |
| Your email provider and Nagu's email service | Deliver and answer a message you initiate | Only when you use a contact link and send an email |
Microsoft Store links open Microsoft’s Store app or website. Microsoft processes Store visits, downloads and account activity under its own privacy statement. Clicking a Store link does not send your saved Codex credentials or quota readings to Microsoft through this website.
Google, GitHub and Microsoft operate global infrastructure and may process data outside your country. Their processing is governed by their applicable terms, privacy notices and transfer safeguards. A GitHub asset count represents an asset request—not a completed transfer, unique person, successful installation or active user.
Nagu relies on legitimate interests to publish, secure and understand essential operation of the static site, and to answer support or security messages you initiate. Optional Google Analytics relies on your consent. Where applicable law requires another basis or notice, Nagu will apply it before that processing.
5. How long information is kept
- Google Analytics user- and event-level data: configured for 14 months, subject to Google Analytics deletion behavior. Google's standard aggregated reports are not governed by that user/event retention setting.
- Your consent preference: kept in this browser until you change it, withdraw it or clear this site's browser storage.
- Hosting and GitHub operational records: retained by the relevant provider under its service and security policies. Nagu does not create a separate identifiable browsing database from those operational records.
- Support, privacy or security email: kept only as long as reasonably needed to answer, investigate, protect the service and meet applicable legal obligations.
Aggregated reports that no longer identify a person may be kept to understand long-term product-site trends.
6. Security and data minimisation
The website is a static site. Analytics is optional and gated by consent. Microsoft Store links work directly, without analytics consent or JavaScript. The optional unsigned EXE opens installation guidance and is enabled only after its release metadata passes source and file-identity checks; the file is hosted by GitHub. Microsoft Store certification applies to the Store package, not to the separate unsigned EXE.
No internet service is risk-free. Keep credentials out of support messages, verify official release hashes and report suspected website or product vulnerabilities privately to kj@nagu.co.
7. Your choices and rights
You may decline or withdraw optional analytics at any time. Depending on applicable law, you may also ask whether Nagu holds personal data about you and request access, correction, deletion, restriction, objection or portability. You may lodge a complaint with the competent data-protection authority.
To exercise a right, email kj@nagu.co. We may need enough information to verify and locate the request, but we will not ask for your ChatGPT password, tokens or desktop-app credential files.
8. Children
This product website is intended for people evaluating a desktop developer utility. It is not directed to children, and Nagu does not knowingly use it to collect children's personal information.
9. Changes to this notice
Nagu may update this notice when the website, service providers or legal requirements change. The effective date above will change with a material update. A new purpose that requires consent will not be applied to optional analytics merely because you accepted an earlier, different purpose.
10. Contact
For general product support, email hello@nagu.co. For privacy, security, legal or publisher matters, email kj@nagu.co.