Privacy Policy

The internet is broken, and we want to do ours to fix it. The ability to track behavior was a giant leap for advertising and has helped many businesses drive efficiencies in their marketing spend. Unfortunately, this has come at the cost of privacy. Rather than addressing the problem, most sites now force you to acknowledge that you are being tracked. Those cookie banners that stop you in your tracks are now everywhere. Not only are they annoying and a poor user experience, but most aren’t implemented correctly: Most sites already track you before you consent.

We can do better, and we are on a mission to prove that you can run a sustainable business without tracking personally identifiable information until you need it for crucial things such as payments.

This policy applies where Møller & Hansen EDB ApS, trading as Nordcraft (\"Nordcraft\", \"we\", \"us\"), determines how and why personal data is processed, including for our website, accounts, billing, communications, analytics, and service administration. When customers use Nordcraft to process personal data in their applications, the customer determines the purposes and means of that processing and Nordcraft generally acts as processor under our Data Processing Addendum.

Who this policy covers

We process personal data in accordance with applicable data protection law, including the EU GDPR and UK GDPR where they apply. We limit collection to information reasonably needed to provide, secure, support, analyze, and improve Nordcraft, communicate with users, administer accounts and billing, and meet legal obligations.

Personal data we collect

We may collect account and contact information such as name, email address, organization, and account settings; billing and transaction information; communications and support requests; and technical and usage information such as IP address, device and browser information, logs, identifiers, pages viewed, referrals, and interactions with the Services. We also process content that users choose to submit to Nordcraft features.\n\nWe do not intentionally request special-category personal data for ordinary account use. Customers should not submit restricted data unless the relevant Nordcraft service expressly supports it and appropriate legal and security requirements have been assessed.We may collect account and contact information such as name, email address, organization, and account settings; billing and transaction information; communications and support requests; and technical and usage information such as IP address, device and browser information, logs, identifiers, pages viewed, referrals, and interactions with the Services. We also process content that users choose to submit to Nordcraft features.\n\nWe do not intentionally request special-category personal data for ordinary account use. Customers should not submit restricted data unless the relevant Nordcraft service expressly supports it and appropriate legal and security requirements have been assessed.

Møller & Hansen EDB ApS, trading as Nordcraft · CVR 43652125 · Æblehaven 15A, 2500 Valby, Denmark · hello@nordcraft.com · Last updated: 2025

How we use data and analytics

We use personal data to provide and administer the Services; authenticate users; secure, troubleshoot, and support Nordcraft; manage subscriptions and billing; communicate about accounts and service changes; understand and improve product usage; and comply with legal obligations. Depending on the context, our legal basis is performance of a contract, legitimate interests in operating and protecting the Services, consent where required, or compliance with law.\n\nWe use Plausible for website analytics. Nordcraft also uses local storage and cookies or similar technologies for functions such as authentication, security, preferences, and attribution, including an initial UTM attribution cookie. Where non-essential analytics or similar technologies require consent, we will request it as required by applicable law.

Data storage, security, and international processing

We use service providers and infrastructure in the EEA and in other countries. The location used can depend on the service, feature, provider, and customer configuration. We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. No online service can guarantee absolute security.\n\nWhere personal data is transferred from the EEA or United Kingdom to a country that does not benefit from an applicable adequacy decision, we use an appropriate safeguard where required, such as the EU Standard Contractual Clauses and, for UK transfers, the UK Addendum.

Service providers and data sharing

We do not sell personal data. We disclose personal data where reasonably necessary to providers that help us operate Nordcraft, such as hosting, content delivery, authentication, database, analytics, communications, support, payment, and security providers. We may also disclose data where required by law, to protect rights and security, in connection with a corporate transaction, or at your direction. Providers are limited to the data and purposes relevant to their services and are subject to contractual or other legal safeguards where required.

Your data protection rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal data; receive portable data; withdraw consent where processing relies on consent; and complain to a competent supervisory authority. These rights may be subject to legal conditions and exceptions.\n\nTo exercise a right relating to a Nordcraft account or our own website activities, contact hello@nordcraft.com. If your request concerns data controlled by a Nordcraft customer through its application, contact that customer first; we will assist the customer as required by our Data Processing Addendum. We will respond within the period required by applicable law.

Changes to the Privacy Policy

We may update this Privacy Policy to reflect changes to Nordcraft, our providers, or legal requirements. We will publish the revised policy here and update the \"Last updated\" notice. If a change materially affects how we use personal data, we will provide additional notice where required by law.

Contact us: You can always contact us if you have questions.

Møller & Hansen EDB ApS, trading as Nordcraft\nCVR 43652125\nÆblehaven 15A\n2500 Valby, Denmark\n\nPrivacy questions and requests: hello@nordcraft.com