Privacy Policy

Last Updated: December 2, 2025

1. Introduction

Welcome to Nuda Kit ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://nuda-kit.com or purchase our Product.

For the purposes of the General Data Protection Regulation (GDPR), the Data Controller is Nuda Kit, located in Barcelona, Spain.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the website, purchase the Product, or contact us for support.

Personal Data

  • Identity Data: Name, email address, and username.
  • Authentication Data: If you sign up via Google or GitHub, we collect your email and public profile ID associated with that account.
  • Transaction Data: Details about payments to and from you (handled via Stripe).

Non-Personal Data

  • Usage Data: IP address, browser type, operating system, and pages visited.
  • Cookies: Data stored in your browser to maintain your session and preferences.

Important: We do not store your credit card information. All payment transactions are processed securely by Stripe, our third-party payment processor.

3. How We Use Your Information

We use your personal data based on the following legal grounds:

  • Contractual Necessity: To process your purchase, deliver the digital download, and provide access to the private repository or Discord server.
  • Legal Obligation: To comply with tax laws (e.g., VAT invoicing in Spain/EU).
  • Legitimate Interests: To improve our website, detect fraud, and send you important product updates (e.g., security patches).
  • Consent: To send you marketing emails or newsletters (you can opt-out at any time).

4. Sharing Your Information

We do not sell your personal data. We may share information with the following third-party service providers who assist us in operating the service:

  • Stripe: For payment processing and fraud detection.
  • Google / GitHub: For user authentication (OAuth).
  • Email Providers (e.g., Resend/Mailgun): For sending transactional emails (receipts, password resets).
  • Vercel / Cloud Providers: For hosting the website infrastructure.

These providers are authorized to use your personal information only as necessary to provide these services to us. We ensure that any data transfer outside the EEA is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs).

5. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have the following rights:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data, subject to legal retention periods (e.g., tax laws).
  • Right to Object: You can object to our processing of your data for direct marketing purposes.
  • Right to Data Portability: You can request your data in a structured, commonly used format.

To exercise any of these rights, please contact us at our support email.

6. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with Spanish tax laws), resolve disputes, and enforce our legal agreements.

7. Cookies and Tracking

We use cookies to enhance your experience (e.g., keeping you logged in). You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service (such as the account dashboard).

8. Contact Us

If you have any questions about this Privacy Policy, please contact us: