Website Privacy Notice

Version 1.2 — effective «FILL: effective date»

This notice explains what happens to information when you visit nulo.sh or join its mailing list. The Nulo wallet itself is covered by the Privacy Policy; this notice adds nothing to what the wallet does.

The short version. The website runs no analytics, no tracking and no third-party scripts, and sets no cookies of mine. If you join the mailing list and confirm your address from the email I send, I keep your email address, the time you confirmed and the version of this notice then in effect. Resend stores the list and sends the emails. You get occasional product updates, and you can leave in one click.

This box is a summary. The sections below are the notice.

1. Who is responsible

The website is maintained by Alejo Amiras, a natural person resident in Argentina ("the Developer", "I"). There is no company. Where applicable data-protection law applies, I am responsible as controller for the processing this notice describes. Resend and Cloudflare process it on my instructions.

In Argentina that processing is governed by Law No. 25,326 (Protección de los Datos Personales), and the supervisory authority is the Agencia de Acceso a la Información Pública (AAIP). Where the GDPR or UK GDPR applies, the bases stated below apply.

Contact: hello@nulo.sh

2. Visiting the website

The website is static and carries no analytics or tracking of mine.

Hosting for nulo.sh is provided by Cloudflare, Inc. (privacy policy). Website requests expose IP addresses, requested URLs and ordinary browser headers to the hosting provider. Information available to the Developer through hosting tools is aggregate traffic statistics (requests, bandwidth, unique visitors and countries) and, for up to the past 30 days, a sample of individual requests showing the time, IP address, country, network, user agent, method, protocol, hostname, requested path, and how the request was cached or filtered. Request logging on the site and on the service that receives sign-ups is turned off, and the hosting provider's browser analytics are not enabled. This processing supports delivery and security of the site, relying on legitimate interests where applicable.

Retention. These records are kept only for as long as the hosting provider makes them available in its dashboard (currently up to 30 days); I do not export or copy them.

3. The mailing list

3.1 What I collect

When you submit the sign-up form, I send one email to the address asking you to confirm it (§ 3.5). When you confirm, I keep your email address, the time you confirmed, the version of this notice in effect at that time, and the fact that you joined from the website. Nothing else: no name, no IP address, no wallet information. If you do not confirm, your address is not added to the list; Resend's records of the request and the email expire after 30 days (§ 3.3).

Your address travels in the body of each request, and the confirmation link carries it in a part of the link your browser does not send to the website, so it does not appear in the request records of § 2. To limit repeated submissions, Cloudflare counts sign-ups and confirmations from your IP address for about a minute. That count is not stored with your address, and I do not log your IP address or your email address.

3.2 Why, and on what basis

To send occasional product updates. Legal basis (GDPR): your consent, under Article 6(1)(a). You can withdraw it at any time by leaving the list; leaving does not affect what was sent before.

3.3 Who processes it

Plus Five Five, Inc., which operates Resend (United States), stores the list and sends the emails on my instructions, under its Data Processing Addendum; its subprocessors are listed at resend.com/legal/subprocessors. Resend stores account data, including the list, in the United States. The emails are sent from its servers in Ireland. Resend also keeps a log of each request the sign-up service sends it, including your address, and a copy of the confirmation email, for 30 days.

3.4 What you receive

Occasional product updates, from hello@news.nulo.sh. When you sign up, you receive one email from the same address asking you to confirm. Replies reach hello@nulo.sh.

Open and click tracking are turned off: the emails carry no tracking pixel, and their links are not rewritten.

3.5 Confirming your address

When you sign up, I send one email to the address you entered, with a link that works for 24 hours. Your address joins the list only when you open the link and press Confirm. If you did not ask, ignore the email: your address is not added. The form sends at most one confirmation email to the same address in 24 hours, and none to an address already on the list or one that left it (§ 3.6). Before each product update I review the list and remove entries that are plainly not real.

3.6 Leaving the list, and how long I keep your address

Every product update has a link that takes you off the list in one click. You can also write to hello@nulo.sh.

I keep your address while you are on the list. When you leave, Resend keeps your address, marked as unsubscribed, with the time you joined and the notice version, so that a later sign-up by anyone cannot add you again. To rejoin, write to hello@nulo.sh. If you ask me to delete your address entirely, I will, and I will tell you that a later sign-up could then add it again. Resend's request log (§ 3.3) expires on its own after 30 days.

4. Writing to me

If you email hello@nulo.sh, the Privacy Policy § 5.5 describes how I handle correspondence.

5. Your rights

Depending on the law applicable to you, you may have rights to access, correct, delete, restrict or obtain a copy of personal data, to object to processing, or to withdraw consent. Contact hello@nulo.sh to exercise them. I will respond within the applicable legal period and explain any lawful limitation. You may complain to the competent data-protection authority: in Argentina, the AAIP; elsewhere, where applicable, the authority where you live or work.

6. International processing

Personal data under this notice is processed outside Argentina. For these transfers the safeguards are:

• Cloudflare, Inc. (hosting; the United States and Cloudflare's global network): the EU Standard Contractual Clauses with the UK Addendum, and Cloudflare's participation in the EU–US Data Privacy Framework, under Cloudflare's Data Processing Addendum.
• Plus Five Five, Inc., which operates Resend (the mailing list and its confirmation emails; the United States, with sending from Ireland): the EU Standard Contractual Clauses with the UK Addendum, and Resend's participation in the EU–US Data Privacy Framework, under Resend's Data Processing Addendum.

Contact me for information about those safeguards.

7. Children

The website and its mailing list are not intended for anyone under 18.

8. Changes to this notice

Each version carries a version number and an effective date, and the current version is published at nulo.sh/website-privacy, with every earlier version kept at its own address. The list records which version was in effect when you joined. Before using your address for anything this notice does not describe, I will ask for your consent.

9. Contact

Alejo Amiras, hello@nulo.sh

Version history