In short, this site sets no cookies and uses no outside analytics. The server keeps short logs, with as little in them as possible, for no more than seven days. And we keep the email you choose to send us.
Who we are
Nexaaly is a sole proprietorship registered in Denmark, CVR 40643419. Send privacy requests to access@nexaaly.com. We reply to them within 5 working days.
Website access logs
| What | Why | How long |
|---|---|---|
| Time, the page asked for without query values, method, host, response status, how long it took and its size | Security, reliability, and measuring the service as a whole | Up to 7 days |
| A shortened IP address, keeping only the first 24 bits of an IPv4 or 32 bits of an IPv6 address | Limiting how many requests one network can send, and grouping visits, without keeping the full address | Up to 7 days |
| The name your browser sends, and the page you came from, with query values removed | Telling robots from real browsers, and seeing roughly where visitors come from | Up to 7 days |
We do not keep full IP addresses, network ports, query values, cookies, login details or passwords in the logs. A new log starts every day, and old ones are deleted after seven days. We do not use them for advertising, and we do not sell them.
The legal basis is legitimate interest, GDPR Article 6, paragraph 1, point f. That is our interest in keeping the site safe and running, finding faults, and knowing whether visits come from people or robots. Keeping little, and only for a short time, limits the effect on visitors.
If you write to us, we keep the emails so we can answer you, and delete ordinary emails no later than 12 months after we last heard from you. Our mail is hosted by PrivateEmail, a Namecheap service.
Our products
This policy covers this website. Nexapad has its own privacy policy, at nexapad.dk/privatliv. If you buy from us, Danish bookkeeping law says we must keep the accounting records, and for those records that law comes before a request to delete them.
Companies that handle data for us
| Who | For |
|---|---|
| PrivateEmail, by Namecheap | Email hosting |
The website and its logs run on our own hardware in Denmark.
Your rights
Under the GDPR you can ask to see your data, correct it, delete it, limit how we use it, or get a copy to take elsewhere. You can also object when we use it on the basis of legitimate interest. Email access@nexaaly.com, in any form you like. If we handle it badly, you can complain to Datatilsynet, the Danish Data Protection Agency, at datatilsynet.dk.
Changes
If this policy changes in a way that matters, we update the date above and say what changed, instead of quietly replacing the text. On 1 October 2026 the site was rebuilt. The contact form is gone, and so is the Stripe payment page of our old website testing offer. So this page no longer describes them, and Stripe is no longer listed as a company that handles data for the site. On 21 October 2026 the site was rebuilt around our own software, so the section about client records is gone; Nexapad's own policy covers its customers.