Privacy Policy

Last updated: September 29, 2026

At NotNatty, we respect your privacy and are committed to protecting the information you provide when using our website and purchasing our products. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices available to you.

By using our website, you acknowledge the practices described in this Privacy Policy.

1. Information we collect

Depending on how you use our website, we may collect the following information:

Information you provide

When you place an order, contact us, or otherwise interact with our website, we may collect:

• Name
• Email address
• Shipping and billing information
• Order and purchase information
• Information you provide when contacting customer support
• Account information, if you create an account

Payment information

NotNatty may accept cryptocurrency payments. When you pay with cryptocurrency, we may receive information necessary to identify and verify your transaction, such as:

• Cryptocurrency used
• Amount paid
• Transaction ID / transaction hash
• Sending wallet address
• Receiving wallet address
• Blockchain network
• Payment status

If you use a third-party exchange or payment service, that provider may separately collect and process information according to its own privacy policy.

Automatically collected information

When you visit our website, certain technical information may be collected automatically, including:

• A one-way hashed identifier derived from your IP address
• Browser type and version
• Device type (desktop, tablet or mobile)
• Operating system
• Pages visited
• Referring website
• Approximate country or region
• Date and time of visits
• General website usage information

We may collect this information through cookies, server logs, analytics tools, and similar technologies.

How we handle IP addresses

Our server has to briefly see your IP address in order to send you a web page. We do not store your IP address. Instead, we convert it into a short, random-looking identifier using a one-way salted hash. That identifier cannot be converted back into an IP address. We store it so we can recognise a returning visitor and count unique visitors accurately, and to block abuse and bot traffic.

Because this identifier, combined with the other technical information listed above, can still single out an individual, we treat it as personal data and protect it accordingly.

The one place your IP address is used beyond serving the page is an approximate country lookup. To show which countries our visitors come from, we send your IP address to a third-party geolocation service and keep only the country code it returns. We currently use ip-api.com, with ipapi.co and ipwho.is as fallbacks. These are separate companies that have their own privacy policies. We do not send them any information that identifies you as a customer.

Our web host and any proxy or content-delivery network in front of the site may also record your IP address in their own temporary security logs, which they manage under their own policies.

Google Search Console

Our website is connected to Google Search Console through a read-only, limited-permission connection. This lets us see aggregated information about how our pages perform in Google search results, such as which search terms lead to which page and how often a page appears. Google provides this information in aggregate. Search Console does not give us the personal details of individual searchers, and we do not use it to identify visitors.

2. How we use your information

We may use collected information to:

• Process and fulfill orders
• Deliver products to the address provided
• Communicate with you about your order
• Provide customer support
• Verify and process payments
• Detect and prevent fraud, abuse, and unauthorized activity
• Maintain and improve our website
• Monitor website performance and security
• Comply with applicable legal obligations
• Maintain business and transaction records
• Respond to legitimate requests from authorities where legally required

We do not use your information for purposes unrelated to the operation of our business unless permitted by law or you have provided appropriate consent.

3. Cryptocurrency transactions

Cryptocurrency transactions operate on public blockchains. Depending on the cryptocurrency and network used, transaction information such as wallet addresses, transaction amounts, timestamps, and transaction hashes may be publicly visible on the blockchain.

NotNatty does not control the blockchain and cannot remove or alter information that has already been permanently recorded on a public blockchain.

4. Cookies and tracking technologies

Our website may use cookies and similar technologies to provide essential website functionality and understand how visitors use our website. Cookies may be used for purposes such as:

• Maintaining shopping-cart functionality
• Remembering website preferences
• Improving website performance
• Understanding website traffic
• Security and fraud prevention

The cookies we set ourselves are:

• nn_vid — a first-party cookie that keeps track of your visit so pages behave normally and we can tell returning visitors apart. It is set to expire after 400 days, is marked HttpOnly so scripts cannot read it, and is marked SameSite=Lax.
• rememberme — a first-party cookie that keeps you signed in to your account between visits.

Neither of these cookies is used for advertising, and we do not run advertising or cross-site tracking cookies.

You can configure your browser to reject or delete cookies. However, disabling certain cookies may affect website functionality. Where required by applicable law, we will obtain consent for non-essential cookies and tracking technologies.

5. How we share information

We do not sell your personal information.

We may share information with trusted third parties when necessary to operate our business, including:

• Hosting and website providers
• Shipping and delivery providers
• Payment and cryptocurrency service providers
• Customer-support providers
• Website analytics and security providers
• Geolocation providers, which receive your IP address at the time of your visit only to determine an approximate country
• Professional advisers
• Government authorities or law-enforcement agencies when legally required

Third-party service providers may process information on our behalf and may have their own privacy policies. We only share information when reasonably necessary for the relevant business purpose, to protect our rights and users, or to comply with legal obligations.

6. Data security

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, internet transmission, database, or electronic storage system can be guaranteed to be completely secure. You are responsible for maintaining the security of your own accounts, passwords, devices, and cryptocurrency wallets.

NotNatty will never ask you for your cryptocurrency private key, seed phrase, or wallet password.

7. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• Processing and fulfilling orders
• Providing customer support
• Maintaining business records
• Resolving disputes
• Preventing fraud
• Complying with legal, tax, accounting, and regulatory obligations

Our website analytics records are kept for a limited time:

• Individual page-view records (the hashed visitor identifier, page, device type, referring site and timestamp) are kept for 90 days.
• Session records are kept for up to 400 days so we can recognise a returning visitor.
• Older activity is rolled up into longer-term totals before the detail is deleted, so the store of page-view records is also capped in size.
• Country and device information derived from a visit is kept with the visitor identifier for the same 90-day period.

Order records, payment records and customer-support records are kept for as long as needed to meet legal, tax, accounting and regulatory requirements, which is typically longer than the analytics periods above.

When information is no longer required, we may securely delete or anonymize it, subject to applicable legal requirements.

8. Third-party websites and services

Our website may contain links to third-party websites, services, cryptocurrency exchanges, payment providers, or other external platforms. NotNatty is not responsible for the privacy practices, security, content, or policies of third-party services.

We recommend reviewing the privacy policy of any third-party service before providing personal information or completing a transaction through that service.

9. Your privacy rights

Depending on where you live, you may have certain rights regarding your personal information. These may include the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of certain information
• Request information about how your data is used
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request a copy of certain information in a portable format

These rights are subject to applicable laws and may have certain exceptions. To exercise an applicable privacy right, contact us using the information provided below.

10. Children's privacy

Our website is not intended for children. We do not knowingly collect personal information from children where prohibited by applicable law. If you believe a child has provided us with personal information, please contact us so that we can review and take appropriate action.

11. International data transfers

Depending on where you are located and where our service providers operate, your information may be processed or stored in countries other than your own. Where required by applicable law, we will take appropriate measures when transferring personal information internationally.

12. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, technology, or legal requirements. When we make changes, we will update the Last Updated date at the top of this policy. We encourage you to review this page periodically for the latest information about our privacy practices.

13. Contact us

If you have questions about this Privacy Policy, your personal information, or our privacy practices, please contact us through the information provided on our website.

NotNatty
— For those who refuse to be average —