Who is responsible
The data controller is Erik Astrand, sole proprietor trading as MalmaMedia, Sweden. A Nordic Childhood is the project name. Privacy questions and requests can be sent to erik@erikastrand.com.
Information we handle
When you visit
We receive aggregate information about visits, page views, referring sites, broad location, browser, device, and selected actions on the site. The analytics setup is described below.
When you purchase
Stripe receives the details you enter at checkout and provides us with the transaction record needed to confirm payment, deliver the collection, provide support, meet accounting obligations, and handle disputes. We do not receive or store your complete card number.
When you download
After Stripe confirms the exact paid product, the site issues a signed access claim in a secure cookie. A successful download-access event is counted without sending the Stripe session, download claim, email address, or file URL to analytics.
When you recover a purchase
If you use purchase recovery, the site sends the checkout email and Stripe receipt number directly to Stripe to match a completed purchase of this collection. We do not save either entry in a separate customer database or send it to analytics. A successful match restores the same secure download cookie.
This website and checkout are intended for adults. We do not ask children to submit personal information.
Analytics and advertising measurement
We use Vercel Web Analytics to understand aggregate visits, page views, referring sites, and three actions: checkout clicks, verified purchase returns, and successful download access. Vercel Web Analytics does not use analytics cookies. It uses a daily-reset visitor hash to produce aggregate statistics rather than a persistent cross-site identity.
We do not send names, email addresses, payment details, Stripe identifiers, download tokens, free-text responses, or full query strings as analytics event data. Campaign measurement is limited to controlled, non-personal values for utm_source, utm_medium, and utm_campaign. Other query parameters are removed before analytics reporting.
We use these aggregate statistics for our legitimate interest in understanding whether the site works and where it can be improved. You can read more in Vercel's analytics privacy documentation.
Optional Meta advertising measurement
For visitors identified as being in the United States, the site loads the Meta Pixel without asking for prior consent, unless a previous refusal or Global Privacy Control signal blocks it. For other visitors, or when location is unavailable, it loads only after you select Allow. It reports page visits, checkout starts, and verified purchases to Meta, including the collection name, currency, and price. Meta may connect those events with information from your browser or Meta account to measure ads and help show them to people more likely to be interested.
We do not send payment details, Stripe session identifiers, download tokens, or the purchaser's email address through the pixel. Outside the US default-on mode, the legal basis is your consent. You can object to US advertising measurement or withdraw consent using Privacy choices. If you turn measurement off, we stop sending further events. Purchasing still works normally.
Service providers
- Vercel
- Hosts the website and private digital file, runs the purchase-verification routes, and provides privacy-focused aggregate analytics.
- Stripe
- Processes checkout and payment information and provides the payment record used to authorise delivery.
- Meta
- Receives visits, checkout starts, and purchase events for ad attribution and delivery optimization. US measurement is on by default unless you opt out; elsewhere we ask for consent first.
These providers may process information outside the EU or EEA, including in the United States. Where required, recognized transfer safeguards are used. Their own notices provide more detail: Vercel Privacy Notice, Stripe Privacy Policy and Meta Privacy Policy.
How long information is kept
- The protected-download cookie expires after seven days.
- Purchase-recovery entries are checked against Stripe during the request and are not retained by this website afterward.
- Your Meta measurement choice stays in this browser until you change it or clear site storage.
- Our current Vercel analytics reporting window is twelve months.
- Payment and transaction records are kept as long as required for accounting, tax, fraud prevention, support, and legal claims.
- Vercel and Stripe retain information according to their agreements and privacy notices.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, or a portable copy of your personal information. You may also object to processing based on legitimate interests. Some information must still be kept when the law requires it.
To exercise a right, email erik@erikastrand.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection.