Sign in

Privacy Policy

Effective version: 2026-09-06. This policy explains how we process personal data when you use 3dm Bank.

Related: Terms of Service.

Controller
Who is responsible for your data.

The data controller is nanu design (enskild firma), Kungsgatan 37B, 753 21 Uppsala, Sweden. For privacy requests, use the contact form.

Data we process
Categories of personal data.
  • Account identity: sign-in identifiers and email associated with your account.
  • Profile: nickname and optional links you choose to publish.
  • Purchases and entitlements: checkout and payment-related records needed to fulfill orders and keep access history.
  • Usage and technical logs: approximate activity needed to operate, secure, and debug the service (for example IP address, device/browser metadata, and request logs).
  • Content you submit: feedback, reports, collection data, and similar material you post.
  • Communications: messages you send to support or similar channels.
Purposes and legal bases
Why we process data (EU/EEA framing).
  • Perform the contract: create and manage your account, process checkout, deliver download access, and provide features you use (Art. 6(1)(b) GDPR).
  • Legitimate interests: secure the service, prevent abuse, improve reliability, and understand aggregate usage in ways that do not override your rights (Art. 6(1)(f) GDPR).
  • Legal obligation: keep records where tax, accounting, or other law requires it (Art. 6(1)(c) GDPR).
Service providers
Processors by role (not by brand name).

We use service providers under contract to process data on our behalf, including:

  • Authentication and account identity hosting
  • Payment processing for checkout
  • Hosting, database, and file storage infrastructure

They may process data only for the purposes we instruct, subject to appropriate safeguards.

Retention
How long we keep data.

We keep account and profile data for as long as your account exists, and for a limited period afterward if needed to close out disputes or legal claims. Purchase and payment records are kept as long as accounting or legal rules require. Logs are kept for a shorter operational period unless needed for security investigations.

Your rights
EU/EEA data subject rights.

Where GDPR applies, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing based on legitimate interests. You may lodge a complaint with a supervisory authority in your country of residence (in Sweden, Integritetsskyddsmyndigheten). To exercise rights, use the contact form. We may need to verify your identity before responding.

International transfers
When data leaves the EEA.

Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as an adequacy decision or standard contractual clauses, as applicable.

Contact and changes
How to reach us and how we update this policy.

Privacy questions: use the contact form. We may update this Privacy Policy; the effective version string at the top of this page shows which text is current. We may notify you of material changes through the site or by email.