Nedkit
Privacy & Cookies
Last updated 1 October 2026
Nedkit collects as little as it can to run the service. We do not sell your data, show ads, or use tracking cookies. Contact hello@nedkit.live about anything on this page.
What we collect and why
- Email address: when you buy (to give you access and send your receipt and sign-in codes), when you ask for the free playbook or calculator (to send it and occasional rental guides, only with your consent), and when you use the contact form.
- Purchase record: amount, currency, date and Stripe payment reference. Card details are handled by Stripe and never reach us.
- Your saved work: properties, plans, roadmap and reading progress you create in Nedkit. It is stored in your browser and, when you are signed in, synced to your account so it follows you across devices.
- Sign-in data: one-time codes and session tokens, stored only as one-way hashes, plus a short device label such as "Chrome on Windows".
- Technical data: IP addresses are used briefly to rate-limit sign-in and forms against abuse. Cloudflare Web Analytics gives us aggregate, cookieless page statistics that do not identify you.
Who processes it
- Cloudflare: hosting, database, email forwarding and privacy-first analytics.
- Stripe: payments, receipts, refunds and fraud prevention.
- Resend: delivering sign-in codes and Nedkit emails.
These providers may process data outside your country under their own data-protection safeguards.
How long we keep it
Sign-in codes expire after 10 minutes and sessions after 60 days without use. Purchase records are kept as long as tax and accounting law requires. Newsletter emails are kept until you unsubscribe (we keep a record of the unsubscribe so we never email you again). Contact messages are kept until handled. Synced saved work is kept while your account exists.
Your rights
You can ask for a copy of your data, a correction, or deletion of your account and saved work at any time by emailing hello@nedkit.live from the address concerned. You can export your saved work yourself from Settings, and unsubscribe from emails with the link in any email. Depending on where you live (for example under the EU/UK GDPR or Malaysia's PDPA) you may also object to processing or complain to your data-protection authority.
Cookies and local storage
Nedkit uses one cookie, and it is strictly necessary:
nk_session: keeps you signed in. Set only when you sign in; secure, HTTP-only and expires after 60 days without use.
Your browser's local storage keeps your saved work on your device and remembers that you dismissed the cookie notice. Our analytics are cookieless. Stripe sets its own cookies on its checkout page to process payments and prevent fraud. We use no advertising or cross-site tracking cookies, so there is nothing to opt out of.
Children
Nedkit is meant for adults and is not directed at children under 16.