BodyCommit does not have user accounts. The extension keeps routines, skips, streaks, minutes, and the daily summary in the editor profile on that computer. A daily summary is a small local note, the sort of line you might see in a status bar: three breaks today, next one when the agent runs. It is not sent to us, and it is not ranked against anyone else.
This website is separate from the extension. The only personal data the marketing site asks for is an email address, and only if you type it into the waitlist or the sponsor form and tick the consent box. The box starts unchecked. Waitlist signup is double opt-in: we store the address as pending, and it counts as subscribed after the confirmation link is opened.
Buttondown is the list. When its API key is set, the form creates a subscriber there and Buttondown sends the confirmation email. Tags are not sent unless the operator opts in, because tagging is a paid add-on. Until that key is present, submissions sit in a file on the server that received the form, with a confirmation link shown on the page. That local fallback is only for setup. The README explains the key, the optional tag, and how to switch.
There is no tracking cookie. A cookieless analytics script in the Plausible style can be turned on with an environment flag. It ships off. If it is on, the privacy page says so in the deployed build, because the flag is read when the site is built.
You can remove a waitlist address from the privacy page, or email hello@bodycommit.com. The German Datenschutz page states the same rights. Andreas Gesellmann operates the project from Forchtenstein, Austria. The Impressum lists the address, UID, GISA number, and the trade authority.