menu

Legal · Privacy

Privacy without
the mystery

your data should have a clear job here.

This policy explains what NoCryClub collects, why we use it, who may receive it, how long we keep it, and the choices and rights you have over your personal data.

Effective October 12, 2026 Applies to NoCryClub website, Life Check, customer account and orders

the short version

Privacy at a glance

01

Personali­zation needs data

Your Life Check answers are used to create and explain a journal recommendation. They are not used to make legal, employment, credit, medical or similarly significant decisions about you.

02

Stripe handles card details

Checkout is hosted by Stripe. NoCryClub stores order and payment-reference information, but does not receive or store your full payment-card number.

03

Marketing is opt-in

Joining the NoCryClub email list is optional and requires you to confirm your address by email. You can unsubscribe at any time.

04

We do not sell your data

Personal data is shared only where needed to run the service, process payments, fulfil orders, send opted-in email, secure the service, or meet legal obligations.

01 · Controller

Who controls your personal data

For the processing described in this policy, the controller is the person or legal entity operating the NoCryClub business. “NoCryClub”, “we”, “us” and “our” in this policy refer to that controller.

Brand
NoCryClub
Controller
Madara Santa Plauca
Address
Riga
Privacy contact
hello@nocryclub.com

02 · Data

What personal data we collect

Life Check & personalization

Your selected Life Check answers, progress, generated profile signals, recommendation reasons, journal structure, selected modules, quantities, format choice, configuration versions and later Reset/check-in information.

Account information

If you create an account: your name, email address, account identifiers and authentication data. Passwords are stored as cryptographic hashes rather than readable passwords.

Orders & fulfilment

Order number, journal configuration, Physical or Digital format, order totals, payment and fulfilment status, email/name, delivery address for Physical orders, country, tracking details and payment-provider reference IDs.

Newsletter

If you opt in: your email address, subscription status, source of the signup, confirmation and consent timestamps, unsubscribe status and technical synchronization status with the email provider when used.

Operational analytics

NoCryClub records first-party operational events such as Life Check start/completion, question progress, recommendation generation and checkout start, together with internal correlation IDs and limited event metadata used to understand and troubleshoot the service.

Technical & support information

Session identifiers and request/security information needed to deliver and protect the site. If you contact us, we also process the information you include in your message and the contact details needed to reply.

The Life Check is designed around planning, routines and organization. NoCryClub does not ask you to provide a medical diagnosis or other special-category information in order to receive a journal recommendation.

03 · Purpose & legal basis

Why we use your data

Contract

Provide the journal service

We process data needed to take steps you request before purchase and to perform a contract: running the Life Check, generating and saving your recommendation, managing your account, creating checkout, processing an order, delivering Digital access and fulfilling a Physical journal.

Legal obligation

Keep required business records

We may need to keep and use order, payment, tax, refund and transaction information where Latvian, EU or other applicable law requires it.

Legitimate interests

Operate and protect NoCryClub

We use limited information for service security, fraud prevention, troubleshooting, internal operational analytics, quality control and improving how the service works, where those interests are not overridden by your rights and freedoms.

Consent

Optional marketing

We rely on your consent when you deliberately join the NoCryClub marketing email list, and for any future non-essential tracking or similar technology where consent is legally required.

04 · Personalization

How the Life Check recommendation works

NoCryClub uses rule-based personalization to turn the choices you make in the Life Check into profile signals and a recommended set of journal modules, quantities and structure. The system also stores recommendation reasons so the result can be explained and reproduced.

This is automated personalization/profiling, but it is used only to tailor your journal experience. It does not make decisions that produce legal effects or similarly significant effects about you. You can review the recommended journal before purchase and change supported parts of the configuration.

05 · Payments

Stripe Checkout

When real payments are enabled, NoCryClub uses Stripe Checkout. We send Stripe the information needed to create and reconcile checkout, such as the order reference, product/format, amount, currency and limited metadata. Stripe may also collect your email, billing/payment information and, for Physical orders, shipping information.

Payment-card entry takes place on Stripe’s checkout service. NoCryClub does not receive or store your full card number or card security code. We receive payment status and identifiers such as the Stripe Checkout Session, Payment Intent and, where applicable, Stripe customer identifier so we can reconcile your order, handle refunds and support you.

Stripe may act as a processor for NoCryClub for some payment activities and as an independent controller for activities it determines itself, such as certain fraud, compliance and payment-network obligations. You can read more in Stripe’s Privacy Center.

06 · Marketing

Email you choose to receive

The footer email form is an optional marketing signup. When you submit it, NoCryClub stores your email address, a pending subscription status and the signup request time. We send you a confirmation link; we only activate your subscription and record consent after you confirm from your email inbox. You can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

NoCryClub currently uses Brevo to manage the marketing list and send opted-in email, so the email address and subscription information needed for that purpose are synchronized with Brevo. Brevo describes itself as a processor for customers using its marketing services and provides GDPR/data-processing documentation. See Brevo’s GDPR information.

You can unsubscribe using the signed unsubscribe link in a marketing email or by contacting hello@nocryclub.com.

07 · Cookies

Cookies and similar technology

The current NoCryClub application uses essential cookies needed for security, session continuity and authentication. These can include the nocryclub_session cookie, the XSRF-TOKEN cookie used for request-forgery protection, and an authentication “remember me” cookie if you choose that option when signing in.

The current first-party operational analytics are stored server-side and do not require an advertising or behavioral-tracking cookie. If NoCryClub later introduces non-essential analytics, advertising or similar tracking technology, we will update this policy and provide a consent mechanism where applicable before activating it for users who require consent.

08 · Recipients

Who may receive personal data

NoCryClub does not sell personal data. We may disclose the minimum information necessary to:

  • Stripe — payment processing, payment security, fraud prevention and refunds.
  • Brevo — opted-in marketing list management and email delivery.
  • Hosting and infrastructure providers — website, database, backups, email delivery and technical operations.
  • Shipping/carrier providers — recipient name, address and shipment information required to deliver Physical orders.
  • Professional advisers and service providers — only where reasonably necessary for accounting, legal, security or technical support.
  • Authorities or other parties required by law — where we are legally required to disclose information or need to establish, exercise or defend legal claims.

09 · Transfers

International data transfers

NoCryClub is operated from Latvia. Some service providers may process data in countries outside Latvia or the European Economic Area. Where a transfer requires a data-transfer safeguard, we expect the relevant provider arrangement to use a lawful mechanism such as an adequacy decision, Standard Contractual Clauses, or another mechanism permitted by applicable data-protection law.

Brevo states that its primary database hosting locations for its service are within the European Union. Its own documentation and processor/subprocessor terms govern the service it provides to NoCryClub.

10 · Retention

How long we keep information

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing your journal/account, supporting an order, resolving disputes, protecting the service and complying with legal obligations.

Life Check & journal

Kept while needed to provide the personalized journal, account and Reset history, unless you request deletion and no legal or contractual reason requires continued retention.

Orders & payments

Transaction, accounting, refund and fulfilment records are kept for the periods required by applicable accounting, tax, consumer-protection and limitation laws.

Marketing consent

Kept while you remain subscribed. After unsubscribe, limited suppression/consent records may be retained where needed to respect the opt-out and demonstrate compliance.

Security & operational records

Kept for a limited period based on what is reasonably necessary for troubleshooting, security, fraud prevention and system integrity.

When an exact retention period cannot be fixed in advance, NoCryClub uses the purpose, legal requirements, sensitivity of the data, dispute/security needs and whether the information can be safely deleted or anonymized as retention criteria.

11 · Your rights

Your privacy rights

Depending on the circumstances and the legal basis for processing, GDPR rights can include the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, and the right to object to certain processing. Where processing is based on consent, you may withdraw consent at any time.

Some rights are subject to legal conditions and exceptions. For example, we may need to retain transaction information that must be kept by law even after an account-deletion request.

To make a privacy request, email hello@nocryclub.com. We may need to verify your identity before disclosing, changing or deleting account/order information.

You also have the right to lodge a complaint with a supervisory authority. In Latvia, the supervisory authority is Datu valsts inspekcija (Data State Inspectorate of Latvia) . Its complaint service is available here.

12 · Security

How we protect information

NoCryClub uses technical and organizational safeguards appropriate to the service, including access controls, hashed account passwords, CSRF protection, authenticated customer/admin areas, signed Stripe webhook verification, and restricted handling of payment information through Stripe Checkout.

No internet service can guarantee absolute security. If we become aware of a personal-data breach, we will assess it and make notifications where applicable law requires us to do so.

13 · Changes

Changes to this policy

We may update this policy when the product, providers, legal requirements or data practices change. The effective date at the top of this page shows the current version. If a change materially affects how we use personal data, we will provide additional notice where appropriate.

14 · Contact

Questions or privacy requests?

Email hello@nocryclub.com. Please include enough information for us to understand the request, but do not send payment-card numbers or passwords by email.

email nocryclub