Privacy Policy

1. Who we are

The Noda websites and products — including Noda Class, SnagMe, Nearby and Liuyao (together, the “Services”) — are operated by the Noda team in Auckland, New Zealand.

Under the New Zealand Privacy Act 2020 we are the “agency” responsible for the personal information described below. You can reach our privacy officer at [email protected].

2. What we collect

Account data: your email address and display name, provided by Google when you sign in with your Google account.

Service data: what you create while using the Services, such as watchlists, alert preferences and saved searches.

Usage data: anonymous, aggregated visitor statistics collected by Google Analytics 4 — loaded only after you accept analytics cookies.

Technical logs: IP address, browser type and request timestamps, kept briefly for security and troubleshooting.

3. How we use it

To operate, authenticate and improve the Services; to deliver the alerts and watchlists you ask for; to understand aggregate usage; and to prevent abuse and security incidents.

We do not sell personal information, and we do not use it for automated decisions that have legal effects on you.

4. Cookies and analytics

We use one strictly necessary session cookie to keep you signed in. Analytics cookies are set only after you press “Accept” in the consent banner; declining does not reduce any functionality.

Analytics are processed by Google Analytics 4. Google may process this data outside New Zealand; see Google’s Privacy Policy for details.

5. Overseas disclosure

Your data is primarily hosted in New Zealand or Australian infrastructure. Two processors operate overseas: Google LLC (United States) for single sign-on and analytics.

Where personal information is sent overseas we rely on comparable safeguards under information privacy principle 12 of the Privacy Act 2020, including Google’s certification under the EU–US Data Privacy Framework, and on your consent for analytics.

6. Storage and security

All traffic is encrypted with HTTPS. Access to production systems is limited to the operators of the Services, and we review our practices regularly.

If a privacy breach occurs that is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

7. Retention

Account and service data are kept while your account is active. Ask us to delete your account and we will remove the associated data, which may persist in encrypted backups for up to 90 days.

Technical logs are kept for up to 12 months.

8. Your rights

Under the Privacy Act 2020 you may ask what personal information we hold about you, request a correction or deletion, and object to our use of it. Email [email protected] and we will respond within 20 working days.

You may also complain to the Office of the Privacy Commissioner (privacy.org.nz, 0800 803 909) at any time.

9. Children

The Services are not directed at children under 16, and we do not knowingly collect their personal information.

10. Changes

We may update this policy as the Services evolve. The current version is always published on this page, with the effective date at the top.