Privacy
What the waitlist on this site keeps, why, for how long, and how to be taken off it. This page covers nok.money only; the app has its own privacy page once you’re in.
Who keeps it
The list is kept by Gray Holding AS, organisation number 923 999 272 in Brønnøysundregistrene. Write to privacy@nok.money about anything on this page.
What is kept
- Your email address.
- The time you left it.
- Which version of the line beside the form you saw, so it’s clear what you agreed to.
Nothing else. No name, no IP address, no cookies. This site has no analytics and no tracking, and its fonts are served from nok.money itself.
Why
To invite you from the waitlist when there’s room, and to send one note when sign-up opens to everyone. Nothing else is sent to your address, and the list is never sold or shared.
The legal basis is your consent (GDPR Article 6(1)(a)). You can take it back at any time: see “Being taken off” below.
Leaving your email is up to you. Without it, you just won’t hear when there’s room. Nobody is chosen or turned down by a machine.
Where it’s kept
The site and the list run on Cloudflare. The list is in a Cloudflare D1 database set to keep its data inside the European Union. Cloudflare handles it for the list’s keeper under its data processing addendum.
Like any web host, Cloudflare handles the connection for each visit, your IP address included, to deliver the page. The address you type passes through Cloudflare’s network on its way to the database. This site doesn’t store your IP address.
Cloudflare, Inc. is based in the US. Where anything passes through Cloudflare outside the EU/EEA, such as the connection for a visit, it’s covered by Cloudflare’s certification under the EU-US Data Privacy Framework, with the EU’s standard contractual clauses in its data processing terms as a fallback.
How long
Until you’ve been invited and have joined or said no, or until the list closes when sign-up opens to everyone, whichever comes first, and never longer than two years. Then your address is deleted.
Being taken off
Write to privacy@nok.money from the address on the list, or say which address it is. It’s deleted, and you get a reply saying so. A note of the date of the deletion is kept, never the address.
Cloudflare keeps restore points of the database for up to 30 days, which can’t be switched off, so a deleted address is gone from those within 30 days.
Your rights
You can ask to see what’s kept about you, to have it corrected or deleted, to have its use paused, to get it in a form you can take elsewhere, and to take back your consent. If you think your address has been handled wrongly, you can complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no), or to the authority where you live.
Changes
If this page changes, the date below changes with it. Anything that changes what your address is used for is asked again before it applies to you.