1. Introduction and Who We Are
This Privacy Policy describes how NodeHodlers S.L. (referred to as “Dappnode ”, “we”, “us”, or “our”) collects, uses, and protects personal information of users of our website Dappnode .com and related services (collectively, the “Services”). NodeHodlers S.L. is a Spanish company (CIF B24726168) with registered address at Santos Ovejero n°1, Despacho P1-12, 24008 León, Spain. We are the controller of personal data processed in connection with the Services in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and other applicable data protection laws. By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. This Policy is also meant to satisfy the information disclosure requirements of Article 13 GDPR. If you do not agree with our practices, please do not use the Services.
2. Information We Collect
We collect various types of personal information (“Personal Data”) from and about you when you interact with Dappnode Services, including:
- Information You Provide Directly: When you purchase hardware or subscribe to Dappnode Premium, we collect information such as your name, billing and shipping address, email address, phone number, payment details (credit card information handled via our payment processor, not stored by us), and any account credentials (username, password) you create. If you contact support or communicate with us, we will collect the information you provide in those interactions (e.g. support tickets or emails).
- Information from Your Use of the Services: When you use our website or Dappnode Premium services, we automatically collect certain data through cookies and similar technologies (see our Cookie Policy below). This may include browser type, device identifiers, IP address, pages or products viewed, clicks and navigation patterns, and usage statistics. For Dappnode Premium (our subscription service), we may also collect diagnostic and performance data from your Dappnode device (e.g. system status, uptime, error logs) as needed to provide monitoring and backup services. If you enable our backup feature, we will process the node backup data you upload to our servers (which may include configuration files or other node data) for storage and recovery purposes.
- Information from Third Parties: We may receive some information from third-party services that you use in connection with Dappnode. For example, if you are referred to our site via an affiliate link, we may receive an affiliate identifier. If you make payments, our payment processor (Stripe) or alternative payment providers (e.g. PayPal, crypto payment gateway) will collect and process your payment information and may share with us limited details such as confirmation of payment or subscription status. We may also receive aggregate analytics information from tools like Google Analytics (e.g. website traffic and usage data) which does not directly identify individuals.
3. How We Use Your Information
We use Personal Data for the following purposes:
- To Fulfill Orders and Provide Services: We process your Personal Data to take and fulfill your orders for hardware, to deliver the products to you, and to provide you with the Dappnode Premium subscription services you signed up for. For example, we use your information to process payments, arrange shipping of hardware, create and manage your user account, provide the premium features (such as sending push notifications, performing node backups, and providing customer support), and ensure the Services function as intended. This processing is generally based on contractual necessity (to perform our agreements with you).
- Customer Support and Communications: We use your contact information (like email) to communicate with you about your orders, subscriptions, and any support inquiries. If you reach out for technical help, we will use your information to troubleshoot and resolve issues. We may also send you service-related announcements or important notices (e.g. changes to terms or privacy policy, security alerts).
- Service Improvements and Analytics: We analyze usage data (e.g. website traffic, how users interact with our products) to understand and improve our Services. This helps us debug problems, optimize user experience, and develop new features. We may use analytics cookies or third-party analytics services (like Google Analytics) to collect this information, subject to your consent where required.
- Marketing and Updates (with Consent): With your permission, we may use your email to send newsletters, updates on new products or promotions, or inform you about Dappnode news. You can opt out of marketing emails at any time by using the unsubscribe link in the message or contacting us. We do not send marketing communications to you unless you have given consent (or if allowed under applicable law for existing customers, and even then you will have a clear opt-out option).
- Fraud Prevention and Legal Compliance: We may use Personal Data as necessary to prevent fraud, enforce our terms and conditions, and protect the security of our Services and other users. We also process and retain Personal Data to comply with legal obligations applicable to us – for example, maintaining transaction records for tax and accounting purposes, or responding to lawful requests by public authorities.
We will not use your Personal Data for purposes that are incompatible with the above, and if we intend to use your data for a new purpose, we will update this Policy and/or request your consent as required.
4. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we rely on the following legal grounds under GDPR for processing your Personal Data:
- Contractual Necessity: Much of our data processing is to fulfill our contract with you. When you order products or subscribe to services, we must process your Personal Data to deliver what you purchased (e.g. processing payment, shipping your device, providing the subscription features). We also process data to provide customer support as part of our contractual obligations.
- Consent: We rely on your consent for certain processing activities, such as sending marketing communications or using certain non-essential cookies and analytics tools. Where we rely on consent, you have the right to withdraw it at any time, which will not affect the lawfulness of processing before withdrawal. For example, we will only send you a newsletter if you’ve opted in, and you can unsubscribe at any time.
- Legitimate Interests: In some cases, we process data based on our legitimate interests or those of third parties, provided those are not overridden by your privacy rights. For instance, we have a legitimate interest in understanding how our customers use our services so we can improve them, and in preventing fraud or misuse of our Services. When we rely on legitimate interests, we will consider your rights and expectations and ensure appropriate safeguards so that your privacy is respected.
- Legal Obligation: We also process data to comply with laws, such as retaining transaction records for tax auditing or providing information to authorities if legally required (e.g. for law enforcement requests).
5. Cookies and Tracking Technologies
Like most websites, our Site uses cookies and similar tracking technologies to enable certain functionality and to collect usage analytics. Cookies are small text files placed on your device that allow us or third parties to recognize you and make your next visit easier and the Service more useful. We use both first-party cookies (set by Dappnode.com) and third-party cookies (set by external services). These cookies may be session cookies (temporary cookies that expire when you close your browser) or persistent cookies (that remain on your device for a set period or until you delete them). The types of cookies we use on our site include:
- Essential/Technical Cookies: These are necessary for our website and online store to function properly. For example, they help remember your cart items, enable you to log in to your account, and ensure security and network management. Without these cookies, basic e-commerce functionalities (like adding products to cart or processing payments) would not work.
- Preference Cookies: These cookies allow our site to remember choices you make (such as language preference or region) to provide a more personalized experience
- Analytics Cookies: We use analytics cookies (e.g. Google Analytics) to collect information about how visitors use our site – for instance, which pages are visited and any errors encountered. This helps us improve the site’s performance and your experience. These cookies collect aggregated data and do not directly identify individuals. We only set analytics cookies with your consent via the cookie consent banner.
- Advertising/Marketing Cookies: At present, we do not display third-party ads on our site, but if we run promotional campaigns, advertising cookies might be used to track the effectiveness of those campaigns or to deliver relevant ads on third-party platforms. For example, we might use a Facebook Pixel or Google Ads conversion cookie in the future to measure ad performance. Such cookies would only be used with consent. Additionally, we have an affiliate program, and if you arrived via an affiliate referral link, a cookie may be used to track that referral for commission purposes. These would be considered marketing cookies.
- Third-Party Service Cookies: When you interact with content from third-party services on our site, those services might set their own cookies. For example, if we embed YouTube videos or you click social media sharing buttons, the third-party (YouTube, Twitter, etc.) may set cookies according to their own privacy policies. Similarly, our payment processor (Stripe) may set cookies necessary for secure payment processing and fraud prevention. We do not control these cookies.
For more details on cookies we use, please see our Cookie Policy. You have choices regarding cookies: when you first visit our site, you will be presented with a cookie consent banner where you can accept or reject non-essential cookies. If you opt in and later change your mind, you can adjust your browser settings to block or delete cookies, or use our website’s cookie settings tool if available. Note: Blocking certain cookies (especially essential ones) may impact the functionality of the site (e.g. you might not be able to complete an online purchase if cookies are disabled).
6. How We Share Your Information
We treat your Personal Data with care and confidentiality. We do not sell your personal information to third parties for their own marketing purposes. However, we do share your data with certain trusted third parties in order to run our business and provide our Services to you, in the following circumstances:
- Service Providers: We share data with third-party service providers who perform functions on our behalf. This includes our payment processing partners (e.g. Stripe for credit card transactions, PayPal if used, or crypto payment gateway DePay for cryptocurrency payments) – these providers receive your payment information to process transactions securely. We also use shipping/courier partners (like DHL) who will get your delivery details to ship hardware products. Cloud service providers host our website and application data (for example, our servers are located in France and possibly other locations, and might be managed by infrastructure providers compliant with EU regulations). If you use Dappnode Premium, any backups of your node data you perform may be stored on third-party cloud storage we utilize. We ensure all such providers are bound by appropriate confidentiality and data protection obligations and only use your data as instructed by us.
- Analytics and Advertising Partners: As noted, we may use Google Analytics or similar analytics tools. These third parties set cookies and collect usage data in aggregate. Google may process such data on servers globally, but we have configured analytics to anonymize IP addresses where applicable. We do not share directly identifying personal info (like your name or email) with analytics or ad partners. If in the future we partner with advertising networks or run campaigns, we might share a hashed identifier or minimal data to measure conversions. Any such sharing will be based on your consent.
Customer Support and Communication Tools: We may use third-party platforms to assist with customer communications or support ticket management (for example, an email service or a CRM). In doing so, some of your contact information or support details could be stored on those platforms. We will choose reputable providers with strong security and privacy commitments.
- Legal Compliance and Protection: We will disclose personal information to courts, law enforcement, regulators or other authorities if legally required or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights or property, protect your safety or the safety of others, or investigate fraud. For example, in response to a subpoena, court order, or similar legal process, we may have to provide relevant data.
- Business Transfers: If NodeHodlers S.L. is involved in a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the successor or acquiring entity as part of that transaction. We will ensure the new owner continues to respect your Personal Data in line with this Policy. You would be notified via email and/or a prominent notice on our site of any change in ownership or use of your Personal Data.
In all cases, we share only the minimum information necessary for the third party to carry out its duties. We also ensure any data processors we employ are subject to data protection agreements (including, where relevant, EU Standard Contractual Clauses for international data transfers, as described next).
7. International Data Transfers
Dappnode is based in Spain (European Union), but we serve customers worldwide. The Personal Data we collect may be transferred to and stored on servers located outside your country or outside the European Economic Area (EEA). For example, as noted, our primary servers are in France (within EU), but some of our service providers (such as Stripe or email providers) might process data in the United States or other countries. When we transfer personal data out of the EEA, we ensure that appropriate safeguards are in place to protect it in accordance with GDPR requirements. These safeguards may include:
- Relying on a transfer adequacy decision from the European Commission (if the destination country has been deemed to provide an adequate level of data protection under GDPR);
- Implementing Standard Contractual Clauses (SCCs) approved by the European Commission, which legally bind the recipient to protect the data; and/or
- Ensuring the recipient is certified under frameworks like the EU-U.S. Data Privacy Framework (if applicable) or has binding corporate rules, etc.
By using our Services or submitting your information to us, you understand that your Personal Data may be transferred to countries outside of your own (including possibly to the USA). We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable law. If you have questions about international data transfers or want to obtain a copy of the relevant safeguards, you can contact us via the information below.
8. Data Security
We are committed to protecting your Personal Data. We implement appropriate technical and organizational security measures to safeguard your information from unauthorized access, alteration, disclosure, or destruction. These measures include, for example:
- Encryption: Sensitive data (such as payment information) is handled by our payment processors using industry-standard encryption (SSL/TLS) during transmission. Our website is served over HTTPS to encrypt data in transit. Where applicable, we encrypt personal data at rest, especially for sensitive categories. For instance, if we store backup data from your Dappnode , we ensure it’s stored securely (and we encourage you to use encryption for your backups as well).
- Access Controls: Personal information is accessible only to authorized personnel who need it to perform their job duties (e.g. customer support agents, order fulfillment staff), and they are subject to confidentiality obligations. We maintain authentication safeguards for internal systems.
- Security Testing and Policies: We regularly update our software and infrastructure to address security vulnerabilities. We use firewalls and monitoring to protect our network. Our team reviews security practices periodically and we have procedures for handling any suspected data breaches.
While we strive to protect your information, no website or Internet transmission is completely secure. Therefore, we cannot guarantee absolute security of data. In the unlikely event of a data breach that affects your Personal Data’s confidentiality or integrity, we will notify you and the relevant authorities as required by law, and we will take immediate steps to mitigate the impact.
9. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Policy, and to comply with legal obligations. The exact duration depends on the type of data and the purpose of processing. Here are some general retention guidelines:
- Account Information: We keep your account profile information (like name, email, order history) as long as you maintain an account with Dappnode . If you delete your account or request deletion, we will remove or anonymize your personal data associated with your account, except for information we are required to keep by law or for legitimate business purposes.
- Orders and Transactions: We retain records of purchases, invoices, and related communications for a period required by tax and accounting laws (for example, Spanish law may require retaining invoices for 5 to 10 years). Even if you request deletion of your account, we may need to keep certain financial records to comply with legal obligations.
- Dappnode Premium Data: If you are a subscriber, we retain data related to your subscription (such as support logs, monitoring data, backup files) for the duration of your subscription. If you cancel your subscription, we will delete or anonymize any personal data related to the subscription within a reasonable time after cancellation. Backup data stored on our servers will be deleted after you unsubscribe or after a grace period, unless you resubscribe within that time. We will inform you of any such grace period or provide a way for you to download your data before deletion.
- Analytics Data: Aggregated analytics data (which is not directly identifiable) may be retained longer for historical analysis, but any analytic cookies on your device can be cleared at any time by you (and they will expire automatically after a set period if you don’t return to the site).
- Marketing Data: If you have consented to receive marketing emails, we will retain your contact details for that purpose until you opt out or unsubscribe. Once you unsubscribe, we may keep your email on a suppression list to ensure we honor your opt-out.
- Legal Holds: If we are in a legal dispute with you or required to keep data due to a legal claim or investigation, we will retain the data as needed for that purpose.
When we no longer have a legitimate need to retain your Personal Data, we will securely delete it or anonymize it so that it can no longer be associated with you.
10. Your Rights and Choices
You have certain rights regarding your personal information, particularly if you are in the EU/EEA or a jurisdiction with similar data protection laws. These rights include:
- Access: You have the right to request a copy of the personal data we hold about you and to obtain information about how we process it.
- Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request correction or completion.
- Erasure: You can ask us to delete your Personal Data in certain circumstances – for example, if it is no longer necessary for the purposes collected, or if you withdraw consent and we have no other legal basis to continue processing. We will honor valid deletion requests and also instruct any service providers to delete relevant data, subject to any legal obligations to retain information.
- Restriction of Processing: You have the right to request that we restrict the processing of your data (e.g. while we verify or investigate your concerns about accuracy or lawful processing, or if you need data preserved for litigation).
- Data Portability: Where processing is based on your consent or a contract and carried out by automated means, you have the right to obtain a copy of your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider, when technically feasible.
- Objection: You may object to our processing of your Personal Data when we base it on legitimate interests, including any profiling. We will assess your objection and, unless we have a compelling legitimate ground to continue processing or it is needed for legal claims, we will stop processing that data. Where your objection is to direct marketing, we will cease marketing processing immediately upon your request.
- Withdraw Consent: If we rely on consent, you can withdraw it at any time (for example, you can opt out of marketing emails or disable analytics cookies as described above). Withdrawal of consent will not affect the lawfulness of processing done before the withdrawal.
- Complaint: If you believe we have processed your Personal Data in violation of applicable law, you have the right to lodge a complaint with a data protection supervisory authority. For EU users, this would be the supervisory authority in the Member State of your habitual residence or of NodeHodlers S.L.’s establishment (Spain’s Agencia Española de Protección de Datos, AEPD). We would, however, appreciate the chance to address your concerns directly before you do this – please see Contact Us below to reach out.
To exercise any of your rights, please contact us at privacy@Dappnode.com or support@Dappnode.com with your request. For security, we may need to verify your identity (for example, by asking you to confirm details we already have) before fulfilling your request. We will respond to requests within the timeframe required by law (generally within one month for GDPR, with possible extension if necessary). Exercise of these rights is free of charge unless the requests are manifestly unfounded or excessive.
California Residents: If you are a resident of California, you have certain rights under the California Consumer Privacy Act (CCPA) and its amendments. These include the right to know what personal information we collect, use, and disclose about you, the right to request deletion of your personal information, and the right to opt out of the “sale” of personal information. However, we do not sell personal information to third parties for monetary value or other valuable consideration. We also will not discriminate against you for exercising any CCPA rights. To exercise access or deletion rights under CCPA, you (or your authorized agent) can contact us using the methods provided in this Policy. We will verify your request as required by law. Please note that certain information may be exempt from CCPA requests (for example, information collected in a business-to-business context may not be fully covered by CCPA rights). We are committed to handling any California resident data in accordance with applicable law.
11. Children’s Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children under 16 (or the applicable minimum age in your jurisdiction) without verifiable parental consent. If you are under 18, please do not attempt to use the site or provide any personal information about yourself. If we learn that we have inadvertently collected Personal Data from a child under 16, we will promptly delete such information from our records. Parents or guardians who believe that Dappnode might have collected information from a minor may contact us to request deletion of that information.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will notify users by updating the “Effective Date” at the top of this Policy and, if significant, by providing a prominent notice on our website or via email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Services after any update signifies your acceptance of the revised policy. If you do not agree to the changes, you should stop using the Services and may request that we delete your personal data as per your rights above.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your Personal Data, please contact us:
- By Email: You can reach our team at support@Dappnode.com or services@nodlers.com. (Please include “Privacy Inquiry” in the subject line if possible.)
- By Mail: NodeHodlers S.L., C/ Santos Ovejero, 1 – Despacho P1-12, 24008 León, Spain.
We will be happy to assist you and will respond as soon as possible. Using our Services indicates that you understand and agree to this Privacy Policy. Thank you for entrusting Dappnode with your data – we are committed to keeping that trust.
