Privacy
Last updated 4 September 2026.
The short version: Nammo keeps as little about you as it can, keeps it in Europe, never sells it, and lets you take it or delete it whenever you like. There are no tracking cookies, no advertising profiles, and no login password to lose. The rest of this page is the detail — split between our website and the app, because they collect different things.
Who we are
Nammo is made by Angela and Kyle. The data controller is Sunslider SAS, 6 rue Jean-Marie Chavant, 69007 Lyon, France. Because we’re established in Europe, the GDPR governs everything we do with your data, wherever in the world you happen to live. You can reach us at [email protected] about anything on this page.
The website
Our website is where you read Nammo’s pieces and, if you like, join the waitlist. It has no accounts and nothing to log into.
The waitlist. If you give us your email address through one of the waitlist forms, we keep it — along with which form you used (the homepage, a piece page, and so on) and the date you signed up — so we can tell you when the app is ready and know what brought people in.
Analytics. We use Plausible, a privacy-focused service, to count page views and see which pieces people read. It works without cookies, collects no personal data, and can’t identify you or link your visits together across sites. Its servers are in the EU. In practice: we can see that a piece about cacio e pepe was read four hundred times last week; we can’t see that you were one of them. Because nothing here identifies you, the site needs no cookie consent banner.
Your theme choice. If you switch the site between light and dark mode, that preference is stored in your own browser so the page doesn’t flash the wrong color next time. It never leaves your device and isn’t personal data.
The app
The app is the real product: one piece of Italy a day, a map that fills in as you read, things you save and want to do. To make those work, the app keeps track of a little more than the website does — but it’s all in service of your experience, and none of it is sold, shared with advertisers, or used to build a profile of you.
Your account starts anonymous. The first time you open the app, it creates an anonymous account for you straight away — before you tell us anything. That’s what lets your map, your saved pieces, and your reading history exist at all. At that point the account holds no name and no email; it’s just a private space on our server that belongs to your copy of the app.
Your name. Early on, the app asks what to call you. That display name is the only thing we ask for up front, and it’s used only to greet you inside the app.
Your email is a way back in, not a password. Nammo never asks you to create a password. If you choose to add your email — or sign in with Apple or Google — it turns your anonymous account into a permanent one, so you can reach the same map and saved pieces from another device or after reinstalling. That’s the whole job the email does: it’s a recovery handle, not a login credential. Signing in with Apple’s “Hide My Email” gives us only a relay address that forwards to you; we never see your real one.
Marketing email is opt-in, and separate. Nammo will only send you news — new features, the occasional treat — if you actively ask for it. When you create an account, there’s a checkbox for it, unticked by default; leaving it unticked, or never touching it, means we send you nothing but the account and service emails described above. If you do opt in, you can change your mind whenever you like — from the “Nammo news” switch in the app’s settings, or the unsubscribe link in any message we send — and turning it off never affects your account or your sign-in link.
What you do in the app. To run the daily experience we store, tied to your account: which pieces you’ve read, the pieces you’ve loved, the ones you’ve saved, your “My Italy” wishlist and whether you’ve ticked things off, and your quiz scores. This is what keeps you from being shown a piece twice, draws your map, and lets your progress follow you if you make a permanent account.
The daily call. If you turn on notifications, we store which time-of-day window you picked and a device token from Apple (APNs) or Google (Firebase Cloud Messaging) so we can send that one daily nudge to your phone. The token belongs to the device, not to you personally, and turning notifications off stops it being used. We never send more than you asked for.
Product analytics. We record anonymous, aggregate usage — things like how many people opened today’s piece, finished it, or took the quiz — so we can make Nammo better. These events reference your account by its ID only and carry no name, email, or contact detail. We do not track you across other apps or websites, we build no advertising profile, and we sell nothing. The only “targeting” Nammo does is the honest assumption that you like Italy.
Payments and Nammo+
Nammo is free and ad-supported, with an optional Nammo+ subscription that removes ads and unlocks deep dive pieces. When Nammo+ is available, buying it works through the App Store or Google Play in the app, and through Stripe on the web. Those companies handle your card details — we never see or store them. What we keep is simply whether your subscription is active and when it renews or expires, attached to your account so your ad-free reading works. A subscription always attaches to a permanent account (email, Apple, or Google), never to a bare anonymous one.
Ads
The free app shows occasional ads through Google AdMob. They’re contextual, not built from a profile of you, and there are none at all during your first week, on the app’s main screens, or for Nammo+ subscribers. Where the law requires it (the UK and EU), the app asks your consent for advertising before any ad loads. The website carries no ads today.
Who else touches your data
We keep the list of companies we rely on short, and we choose them for keeping data in Europe where we can:
Supabase stores your account and everything in it, on servers in the European Union (Frankfurt). Cloudflare handles security, delivery, and the routing of email to and from our @nammo.app addresses. Apple and Google provide sign-in, notification delivery, and in-app payments; Stripe provides payments on the web. Resend (EU) sends the occasional account email, such as your sign-in link. Plausible (EU) counts website visits. Each handles only what it needs for its job, and none may use your data for their own purposes.
Where it’s kept
Your account and its contents are stored with Supabase in the European Union. Our website runs on a server in Germany behind Cloudflare. Your data stays in Europe — which also means there’s no transfer of it out of the EU to worry about. The narrow exceptions are the sign-in and payment services above, which are the industry-standard providers Apple, Google and Stripe.
How long we keep it
Your account data stays while your account exists. Ask us to delete it and we will, along with the account. Waitlist addresses we keep until Nammo has launched and we’ve told you, or until you ask us to remove you — whichever comes first. Anonymous, aggregate analytics that can’t be tied back to you may be kept to understand trends over time.
Your rights
The GDPR applies to everything we do with your data. You can ask us to show you what we hold, correct it, delete it, or send it to you in a portable form. You can object to us processing it, or withdraw consent at any time. Email [email protected] and we’ll do it — no form, no process, no reason needed.
One honest limit: if you’ve only ever used an anonymous account and given us no email, we have no way to tell which account is yours, so we can’t act on a request for it — there’s nothing linking it to you. Adding your email fixes that, and in the meantime you can always clear that data by removing the app.
If you’re unhappy with how we’ve handled a request, you can contact the CNIL, the French data protection authority, or the equivalent body where you live.
Children
Nammo is made for a general adult audience and isn’t directed at children. We don’t knowingly collect data from anyone under the age required in their country.
Changes
If we change what we collect or why, we’ll update this page and move the date at the top before the change takes effect. Significant changes we’ll flag in the app or on the site.