Unmarker.it Privacy Policy
Version v1.0.0 · Effective 18 September 2026.
Controller and contact details
The data controller is NOMADE - S.R.L., Via Luigi Salvatore Cherubini 10, 50121 Florence (FI), Italy, Italian VAT and tax code 07505480488. For support or requests about personal data, contact help@nomadesrl.it; certified email (PEC): info@pec.nomadesrl.it. NoMaDe's sole director personally handles these requests. The support mailbox is hosted by Aruba.
Data, purposes and legal bases
| Processing | Data and purpose | Legal basis |
|---|---|---|
| Use of the image tool | The selected image is processed in the user's browser and is not uploaded to our servers for this function. | Performance of the requested service, to the extent that the controller processes any data. |
| Site operation and security | Network requests, IP addresses in infrastructure systems and technical logs; abuse prevention, diagnosis and availability. | Legitimate interest in security and continuity, with data limited to what is necessary. |
| Sponsor purchase | Identification, tax and contact details, payment and campaign references, checkout session and accepted terms. | Contract or pre-contractual steps for a self-employed professional; legitimate interest in relation to company representatives. |
| Sponsor publication | The public name, URL, description and icon provided by the customer and shown to visitors. | Performance of the requested campaign, taking account of any third-party rights. |
| Invoicing and accounting | Tax details, invoices, payments, refunds and related documents. | Compliance with legal obligations. |
| Support and protection of rights | Correspondence and information needed to address requests and disputes. | Contract, legal obligations or legitimate interest, depending on the request. |
| Optional analytics | Navigation events, image workflow use, sponsor impressions and clicks, purchase conversions, technical errors and performance, pseudonymous identifiers and device information. | Consent, which can be withdrawn in the preferences. |
An icon uploaded for sponsorship is different from an image processed with the tool: the icon is sent to the server, normalised and published in the campaign. Do not include unnecessary personal data in materials intended for publication.
Payment takes place on Stripe Checkout. NoMaDe receives the references and outcomes needed to manage the order, but not complete card details. Stripe processes card data under its own notices and roles.
Required information and choice
The details requested for orders and invoicing are necessary to complete and perform the purchase and meet tax obligations. Analytics are optional: refusing or withdrawing consent does not prevent use of the site or a purchase. Withdrawal does not affect the lawfulness of earlier processing.
Recipients and international transfers
Access to data is limited to the director, authorised persons and providers performing their respective functions:
- Vercel: hosting, site delivery and server functions.
- Neon: database for campaigns and purchases.
- Stripe: payment processing, fraud prevention and the payment service's own obligations. It acts as a processor or an independent controller, depending on the processing, as described in its privacy notice.
- PostHog: optional analytics and diagnostics in its EU Cloud region.
- Aruba: support email hosting.
- Fatture in Cloud / TeamSystem: invoicing and related compliance.
- Appointed administrative and professional advisers, and public authorities where required by law.
Providers that process data on NoMaDe's behalf do so under data processing agreements. Sponsor materials are published on the site and are therefore accessible to visitors; tax details are not part of the public sponsor card.
PostHog's EU region does not guarantee that every provider processes all data exclusively within the European Economic Area (EEA). Infrastructure, support and subprocessors may involve transfers to the United States or other countries outside the EEA. The safeguards in the relevant agreements apply, such as an adequacy decision where applicable, or the European Commission's standard contractual clauses and any necessary supplementary measures.
Public references include the agreements of Vercel, Neon and PostHog. To ask which safeguards apply and obtain a copy, email help@nomadesrl.it, subject to third parties' confidential information.
Retention
We keep data needed to provide the service and meet applicable obligations, without creating additional archives for general purposes. The director also manages retention through manual reviews and deletion.
| Data | Period or criterion |
|---|---|
| Images processed with the tool | Remain in the browser; no copy is kept on our server. |
| Purchases definitively abandoned or expired without payment | Deleted within 90 days of closure, after checking that no payment or dispute remains. |
| Operational copies of sponsor icons and materials | Published until the campaign ends; copies no longer needed are removed within 90 days of its end. Only evidence needed for the contract or a dispute is retained. |
| Ordinary support correspondence unrelated to tax obligations or disputes | Up to 12 months after the request is closed. |
| Invoices and accounting documentation | 10 years from the last relevant entry, or longer if an investigation or law requires it. |
| Paid orders, accepted terms and essential evidence of performance, payments and refunds | Up to 10 years after the relationship ends for documentary obligations and protection of rights. A dispute may require retention until it is resolved. This does not automatically extend to every log or operational file. |
| Ordinary technical logs | For diagnosis and security, within the infrastructure provider's available window. We do not create an additional permanent archive. Incident-related extracts are kept for the incident and deleted when no longer needed, unless required to protect rights. |
| PostHog analytics events | We use the Free plan, with an expected 12-month retention window. We do not create a separate analytics archive. At least annually, we review whether data are still needed and whether retention is applied, and use the provider's deletion tools for data no longer necessary. |
PostHog retention depends on the plan and how it is actually applied to the project; the plan window alone does not guarantee automatic physical deletion on a precise date. Deletion requests are handled separately. We do not use session replay or keep session recordings.
Data that must be kept by law or for a dispute are limited to relevant information. Deletion from operational systems is reflected in backups as they are replaced under the provider's cycle; backups are not used for analytics or to republish campaigns. Relevant deletions are reapplied after a restore. The lifetime of a cookie differs from the retention of a server record or event.
Rights and complaints
Where and to the extent provided by law, individuals may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests, by writing to the controller. Analytics consent can be withdrawn through the preferences without contacting support.
Individuals may complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority. Erasure does not remove documents that must be retained under a legal obligation.
NoMaDe does not use analytics for solely automated decisions with legal or similarly significant effects on individuals. Stripe describes its payment and anti-fraud checks in its own notice. For purchase problems, contact support.
Cookies and analytics
The Cookie Policy describes necessary tools and optional analytics. Preferences can be reopened from the footer. Refusal and withdrawal also apply to purchase-related server events for the same browser. The choice lasts six months. Session replay is disabled both in the PostHog project and in the client; we do not record sessions.
We do not initialise PostHog before consent. Measurements are pseudonymous, not anonymous, and cover only visitors who consent. Local withdrawal takes effect immediately; server-side withdrawal requires a connection and confirmation. If it fails, the site shows a notice and allows another attempt. See the Cookie Policy for the inventory of tools.