Privacy Policy

This policy explains how The Nomad Deck handles personal information through thenomaddeck.com and our NomadDeck website mirror. We are responsible for the information we use to operate this website, respond to you, and manage NomadDeck reservations.

For privacy questions or requests, contact support@thenomaddeck.com. Stripe operates its checkout under its own Privacy Policy.

• Website visits: our hosting and security services process connection and request information, such as IP address, browser details, requested pages, timestamps, and error or security events.
• Support: when you email us, we receive your email address, the name you provide, your message, attachments, and our correspondence. Please do not email card details or passwords.
• Reservations, when checkout opens: we store your selected color, RAM, storage and operating system, the quoted price, deposit and credit, reservation identifiers, the accepted terms, and creation/update times.
• Giveaway entries: name, email, optional phone, entry count, eligibility acceptance, rules version, entry timestamps and optional email marketing consent. We save entries in the order service and sync them to our Mautic contact system. The phone bonus is optional and does not authorize marketing texts.
• Payment updates: Stripe can return your name and email, checkout and payment references, and payment, refund or dispute status. Our order database does not store complete payment-card numbers or card security codes.
• Delivery: if you proceed to a final order, we will ask for the contact and delivery information needed to fulfill it before final payment. The current configurator does not collect a delivery address.

Browsing or changing a configuration does not create a paid reservation. While checkout is closed, this website does not collect reservation payments.

We use information to deliver the website, answer questions, prepare and administer reservations, verify payments, apply the $20 credit, handle refunds or disputes, and communicate about your order. Technical records help us troubleshoot problems, prevent duplicate charges, and protect the service from abuse.

Where data protection law requires a legal basis, these activities rely on taking steps you request before a purchase or performing a contract, our legitimate interests in operating and securing the service, and applicable legal obligations. If we ask for consent for an optional use, you can withdraw it by contacting us without affecting earlier lawful processing.

Contact and order details are needed to process a reservation or support request; you can choose not to provide them, but we may be unable to complete that request. We do not use this site to make solely automated decisions that produce legal or similarly significant effects on you.

We share information as needed with providers that operate the service:

• Hetzner: hosts the main website and order database.
• Cloudflare: supplies DNS, content delivery, TLS, security, and network diagnostics.
• OpenAI Sites: hosts the NomadDeck website mirror when you use that address.
• Mautic: our self-hosted contact platform stores giveaway entries and separate email marketing preferences. Giveaway entry does not subscribe you to marketing unless you choose it.
• Stripe: provides checkout and payment-related services when reservations open. Its own terms and privacy choices apply to its service.
• Spaceship / Spacemail: handles email sent to our support address.

For a final shipment, relevant delivery details may be provided to the fulfillment provider and carrier. We may disclose records when legally required or reasonably necessary to investigate fraud, resolve a dispute, or protect legal rights. We do not sell personal information or share it for cross-context behavioral advertising.

When you start checkout, the site uses browser session storage to remember that checkout attempt and a private status-access token. This helps reopen the same checkout instead of starting a duplicate. It normally lasts for the browser tab session; clearing site data removes it, and some browsers restore session data when restoring tabs.

The owner dashboard uses a secure session cookie for sign-in. Your confirmation link also contains a private access token. Keep it private: someone with that link may be able to view your reservation, request an eligible refund, and use your payment and queue controls.

We have not added advertising pixels or third-party marketing trackers to the NomadDeck application. Hosting and security providers may use necessary cookies and network diagnostics. Stripe may use its own cookies and technologies after you enter its checkout; see Stripe’s policy for its controls. You can manage cookies and stored site data in your browser, although blocking necessary storage can affect checkout recovery.

We keep information for the purpose for which it was collected. We retain the credit record while unused credit remains available without expiry. The retention decision depends on whether an order or support issue remains open, outstanding refunds or disputes, applicable accounting and recordkeeping duties, and the need to investigate security incidents or legal claims. We review information for deletion or anonymization when those needs end.

Order records are backed up for recovery. Removing an active record does not immediately remove it from every protected backup; a retained backup is restricted to recovery and legitimate recordkeeping needs. Providers may have separate retention periods for records they control.

We use HTTPS, restricted access to the order service, and database backups. No website or transmission method can guarantee absolute security. Contact us promptly if you believe your reservation link or information has been exposed.

Our website is accessible worldwide, and our hosting, email and payment providers operate internationally. Your information may be processed outside your country, where privacy laws may differ. Where applicable law requires safeguards for an international transfer, we must use an appropriate permitted mechanism, such as an adequacy decision or approved contractual protections. Contact us for information about the arrangements relevant to your request.

Depending on your location, you may have rights to access or receive a copy of your information, correct it, request deletion, restrict processing, object to processing based on legitimate interests, or receive portable data. You may also withdraw consent where it is the basis for a particular use and complain to your local data protection authority.

Email support@thenomaddeck.com with your request. We may need reasonable information to verify that the records belong to you. We will respond within the period required by applicable law and explain any legal reason that prevents us from fully fulfilling a request. We will not discriminate against you for exercising an applicable privacy right.

For information controlled independently by Stripe, use the rights and contact options in Stripe’s Privacy Policy.

This website is not directed to children under 13, and we do not knowingly collect their personal information. A purchase must be made by someone legally able to enter the transaction. If you believe a child has provided personal information, contact support so we can review and remove it where appropriate.

We will update this page when our practices change and change the effective date. If a material change affects how we use information already collected, we will provide the notice or obtain the consent required by applicable law.