Privacy Policy

Last updated: 18 August 2026

1. Controller

The data controller is Byrå42 AB, 559353-1311, Garnisonsvägen 3, 681 55 Kristinehamn, Sweden, which operates NØTHING CLUB. Contact: hello@n0thing.club.

2. What we collect

We keep the amount of personal data we collect deliberately small:

  • Your email address (your identity and how you access your membership)
  • Your country (for tax, compliance and analytics)
  • Order and payment status from our payment provider (we do not store full card details)
  • Your record of consent to immediate delivery given at checkout, with a timestamp
  • If you choose to appear on the Wall: the alias and short comment you submit
  • Aggregate, privacy-respecting analytics about how the site is used

3. Why we use it

To create and maintain your membership, assign and display your member number, issue your membership card, process payment, meet our legal and tax obligations, prevent fraud, and communicate with you about your membership.

4. Legal bases

Performance of the membership contract; compliance with legal obligations (for example accounting and tax law); and our legitimate interest in running and securing the Club. Marketing or waitlist messages, if any, are sent only with your consent, which you can withdraw at any time.

5. Who processes your data

To run the Club we use a small number of trusted service providers ("processors") who process personal data on our behalf under data-processing agreements:

  • Stripe — payment processing (as an independent controller or processor, as applicable)
  • Supabase — database and member sign-in
  • Vercel — website and application hosting
  • Resend — transactional email (such as your sign-in and welcome emails)
  • Where enabled, a privacy-respecting analytics provider

We do not sell your personal data. We share it only with these providers, where required by law, or to establish or defend our legal rights.

6. International transfers

Some of our processors are based in, or store data in, countries outside the European Economic Area (EEA), including the United States. Where personal data is transferred outside the EEA, we rely on a safeguard recognised under EU data-protection law — such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework — so that your data continues to receive an adequate level of protection. You can ask us for more information using the contact details below.

7. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access — including encryption in transit, access controls, and reputable providers that maintain their own security standards. No system is completely secure, but we take reasonable steps to keep the little data we hold safe.

8. Retention

We keep personal data only as long as needed:

  • Transaction and accounting records: for as long as the law requires (in Sweden, seven years under the Accounting Act).
  • Your email and membership record: for as long as your membership exists. Your member number is kept permanently as part of the Club's historical record, but where you validly request deletion we detach or anonymise the personal data linked to it.
  • Waitlist and marketing contacts: until you unsubscribe or ask us to delete them.

When data is no longer needed, we delete or anonymise it.

9. Your rights

Subject to your jurisdiction, you may request access, correction, deletion, restriction or portability, object to certain processing, and withdraw consent. Contact hello@n0thing.club. You may also lodge a complaint with your local data-protection authority (in Sweden, the Swedish Authority for Privacy Protection, IMY).

10. Children

NØTHING CLUB is intended for adults (18+) and is not directed to children. We do not knowingly collect personal data from anyone under 18.

11. Cookies and analytics

We use only cookies and similar technologies that are strictly necessary to run the site and keep you signed in — these do not require consent. We do not use advertising or cross-site tracking cookies. Where we use analytics, we use a privacy-respecting, cookieless method that does not store identifiers on your device or track you across other sites, so no consent banner is required. If we ever introduce a technology that does require consent, we will ask for it first.

12. Changes

We may update this policy. We will post the new version here and update the date above; significant changes will be communicated by a reasonable means.

13. Contact

Privacy questions: hello@n0thing.club.