Who is responsible
The data controller is Erik Astrand, sole proprietor trading as MalmaMedia, Sweden. A Nordic Childhood is the project name. Privacy questions and requests can be sent to erik@erikastrand.com.
Information we handle
When you visit
We receive aggregate information about visits, page views, referring sites, broad location, browser, device, and selected actions on the site. The analytics setup is described below.
When you purchase
Stripe receives the details you enter at checkout and provides us with the transaction record needed to confirm payment, deliver the collection, provide support, meet accounting obligations, and handle disputes. We do not receive or store your complete card number.
When you download
After Stripe confirms the exact paid product, the site issues a signed access claim in a secure cookie. A successful download-access event is counted without sending the Stripe session, download claim, email address, or file URL to analytics.
This website and checkout are intended for adults. We do not ask children to submit personal information.
Website analytics
We use Vercel Web Analytics to understand aggregate visits, page views, referring sites, and three actions: checkout clicks, verified purchase returns, and successful download access. Vercel Web Analytics does not use analytics cookies. It uses a daily-reset visitor hash to produce aggregate statistics rather than a persistent cross-site identity.
We do not send names, email addresses, payment details, Stripe identifiers, download tokens, free-text responses, or full query strings as analytics event data. Campaign measurement is limited to controlled, non-personal values for utm_source, utm_medium, and utm_campaign. Other query parameters are removed before analytics reporting.
We use these aggregate statistics for our legitimate interest in understanding whether the site works and where it can be improved. You can read more in Vercel's analytics privacy documentation.
Service providers
- Vercel
- Hosts the website and private digital file, runs the purchase-verification routes, and provides privacy-focused aggregate analytics.
- Stripe
- Processes checkout and payment information and provides the payment record used to authorise delivery.
These providers may process information outside the EU or EEA, including in the United States. Where required, recognized transfer safeguards are used. Their own notices provide more detail: Vercel Privacy Notice and Stripe Privacy Policy.
How long information is kept
- The protected-download cookie expires after seven days.
- Our current Vercel analytics reporting window is twelve months.
- Payment and transaction records are kept as long as required for accounting, tax, fraud prevention, support, and legal claims.
- Vercel and Stripe retain information according to their agreements and privacy notices.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, or a portable copy of your personal information. You may also object to processing based on legitimate interests. Some information must still be kept when the law requires it.
To exercise a right, email erik@erikastrand.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection.