Privacy Policy

Nusafa is published by Galaxims Technologies LLC. You can read every article without an account or an email address. This page explains what we collect if you subscribe to the dispatch, and what happens when you only browse. If you use the Nusafa app or have a Nusafa account, see the app privacy policy.

Who is responsible for your data

Galaxims Technologies LLC decides how the data described on this page is used. You can reach us at [email protected] about anything here, including the requests listed under “Your rights”.

What we collect when you subscribe

• The email address you enter.
• The page you signed up from, such as the homepage, a pillar, or a specific article.
• When you signed up and when you confirmed.
• Your browser type and approximate country, used to spot abuse and fake signups. We do not store your full IP address.
• A random token that powers your confirmation and unsubscribe links.

We do not collect payment information, we do not ask for your name, and we do not run third party advertising trackers on this site.

Confirming your email

Signing up sends a confirmation email. You are not added to the dispatch until you click the link in it. If you never click, we send you nothing further. If you signed up from a prompt that said you would hear when the Nusafa app opens, we also send you one message on that day, and we record which page you signed up from.

Feedback you send us

If you use the feedback form, we receive the message, the kind of feedback you chose, the page you sent it from, and your email address if you give one so we can reply. It is sent to our team by email through Resend and kept in our inbox. It is not stored on the site, not added to any mailing list, and not shared. Ask us to delete it at any time.

What we collect when you only browse

Reading the site does not require sharing personal details with us. We do record a small amount about each visit:

• Page views: the page, the site you came from, and the country and state or province your connection appears to be in. Our host works that out from your IP address when the page loads. We keep only the country and region, never the IP address.
• An anonymous visitor id, kept in your browser, so we can tell a returning reader from a new one. It is not linked to your name, your email address or your IP address.
• A scrambled form of your connection address, kept for a short time, to slow down abuse such as repeated sign in or sign up attempts. It cannot be turned back into your address.

Like any host, our hosting provider also processes standard server request data, such as IP address and browser type, to deliver pages and keep the site secure.

Why we use it, and our legal grounds

If you are in the European Economic Area, the United Kingdom or Switzerland, the law asks us to name the ground for each use:

• Sending the dispatch to subscribers: your consent, which you give by confirming your email and can withdraw at any time by unsubscribing.
• The anonymous visitor id and the affiliate script: your consent. In those regions both stay off unless you accept the banner.
• Counting page views, and keeping the site secure and free of abuse: our legitimate interest in knowing which articles help and in protecting the service. Counting a page view without any identifier holds nothing that identifies a person.

We use what we collect to send the Nusafa dispatch and the one confirmation email, to see which topics and articles readers find useful, and to keep the site working and safe. We do not sell or rent subscriber data, and we do not use your address for anything unrelated to Nusafa.

What stays in your browser

Some features save a small amount of data in your own browser, using local storage:

• Articles you have opened, so cards can show a “Read” marker and you can hide them from lists.
• Your best Memory Match scores, one per level.
• Your choices, such as having closed the newsletter card or answered the consent banner.
• The anonymous visitor id described above.

Except for the visitor id, this data never leaves your device and is not sent to us. It stays on that browser only, so it will not follow you to another device. Clearing your site data removes it.

Who handles your data for us

• Supabase hosts the database that stores subscriber records and page view counts.
• Resend delivers our confirmation and dispatch emails.
• Vercel hosts the website.
• Stay22 provides the affiliate script described below.

The first three process data only to provide their service to us. We do not sell your personal information for money.

How long we keep it

• Subscriber records for as long as you are subscribed. After you unsubscribe we keep your address marked as unsubscribed, so a stray signup cannot quietly re-add you, until you ask us to delete it.
• Page views hold no name, email address or IP address. We keep them for as long as they help us understand what readers need, and review that at least once a year.
• Abuse protection records last about a day and are cleared automatically.
• Email we have sent you stays with the delivery service for the period it keeps its own logs.

Your choices

• Unsubscribe: every dispatch email has a one click unsubscribe link. It stops all email to you.
• Delete your record: email [email protected] from the address you subscribed with, or reply to any email we have sent you, and ask us to delete it.
• Browser signals: if your browser sends Do Not Track or Global Privacy Control, we do not create the anonymous visitor id and we do not load the Stay22 script, wherever you are.

Counting readers

We count page views to see which articles help. The anonymous visitor id is not shared with anyone, and it is not created if your browser sends Do Not Track or Global Privacy Control. You can clear it any time by clearing this site's data in your browser.

On articles we may show a small, dismissible card offering the newsletter. Your browser remembers that you closed it or subscribed, so we do not keep asking.

Affiliate links

Every article carries an affiliate promo, and some articles contain other affiliate links. Our pages load a script from Stay22 that turns hotel and tour links into affiliate links, so Stay22 may receive technical data such as your IP address and the page you are on, and may set cookies. Some laws, such as California's, treat that kind of data sharing for advertising as a “sale” or “sharing” of personal information, which is why we do not load the script if your browser sends Global Privacy Control or Do Not Track. If you are in the EU, the UK or Switzerland, the script and our anonymous visitor id stay off unless you accept the banner; you can clear this site's data to change your choice. If you click a link, the retailer or booking site may also collect its own data under its own policy. See our disclosure page for how affiliate links work and how we label them.

Your rights

Whatever country you live in, you can ask us to tell you what we hold about you, to correct it, or to delete it. Depending on where you live, the law may also give you more:

• In the EEA, the UK and Switzerland: the right to access your data, to have it corrected or deleted, to receive a copy you can move, to object to or limit some uses, to withdraw consent at any time, and to complain to your local data protection authority.
• In California and some other US states: the right to know what personal information we collect, use and share, to delete it, to correct it, to opt out of its sale or sharing for advertising, and not to be treated worse for using these rights. We do not sell personal information for money, and the Global Privacy Control signal is honored as described above.

To use any of these, email [email protected]. We may need to confirm the request comes from the address in question, and we will answer within the time the law allows, which is no more than 45 days in most places.

Where data is handled

Galaxims Technologies LLC is based in the United States, and our providers process data there. If you are in the EEA, the UK or Switzerland, your data is therefore transferred to the United States. We rely on the safeguards our providers offer for that, such as standard contractual clauses.

Security

We use encrypted connections, restrict who can reach the systems that hold subscriber records, and keep personal data to the minimum above. No system is perfectly secure, so we cannot promise absolute security.

Children

The site is written for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has subscribed, email us and we will delete the record.

Changes to this policy

We may update this policy as the site changes. Material changes will be reflected by the “last updated” date above, and if we start using your email address in a new way we will ask you first.

Contact

Galaxims Technologies LLC. Questions or requests: [email protected].