Proof of Business, Privacy Policy, and Security Statement
Effective Date: January 1, 2026
Last updated: October 11, 2026
Nudge.online is a self-proprietary company owned by Rodney A. Stegemann and registered in the State of Washington (UBI: 604 001 693 001 0001). The Spirit of 2021 domain and Mt. Cambitas subdomain are owned by nudge.online.
Let the following explain how nudge.online collects, uses, discloses, and safeguards your data while using the cambitas.spiritof2021.online web application.
1. Information nudge.online Collects
- Registration Data: Name, email address, hashed password, optional avatar.
- Payment Information: Processed exclusively via Stripe (nudge.online does not store card details).
- Usage Data: Audience measurement via self-hosted Matomo, with shortened IP addresses and no link to your account.
- Communication Data: Transactional emails (verification and the like) and an optional monthly newsletter.
2. Cookies and Tracking Technologies
Nudge.online uses the Iubenda Cookie Banner for consent management. The Matomo instance is self-hosted on nudge.online's own server and operates in hybrid mode:
- Server-side PHP tracking is always active. It records which documents are opened, for how long, and the searches made on the site. It shortens your IP address before storing it, sets no cookies, and is never linked to your account.
- JavaScript tracking is active by default for visitors in the United States and Switzerland. For visitors elsewhere in Europe and in Brazil, it activates only after you give consent. It sets the first-party cookies
_pk_id(13 months) and_pk_ses(30 minutes). - The "Your Privacy Choices" panel covers the sale, sharing and advertising use of personal information. It does not switch off audience measurement. To stop all measurement, use the opt-out form below, but please consider the following first:
3. Payment Security
All payments are handled securely through Laravel Cashier + Stripe. Nudge.online does not store full credit card numbers, CVV, or any PCI-sensitive data. Stripe is PCI DSS Level 1 compliant and processes payments on your behalf. Stripe is used by Apple Financial Services (AFS).
4. Account & Password Security
Passwords are hashed using Laravel’s bcrypt. Registration requires a minimum 8-character password with confirmation. Email verification is mandatory. Avatars are validated (image type, max 2 MB) before secure storage.
5. Data Storage and Retention
Data is stored on HostPapa servers in North America. Personal data is retained until you delete your account or unsubscribe. Payment records are kept as required by U.S. tax law (currently 7 years). Analytics records of individual visits are deleted after 180 days; only aggregated statistics are kept longer.
6. Third-Party Processors
- Stripe – payment processing
- HostPapa – hosting
- Self-hosted Matomo – analytics (no third-party transfer)
- Iubenda – consent management
Nudge.online does not sell your personal information.
7. Your Rights
You have the right to access, correct, delete, or export your personal data at any time.
- To delete your account please visit your Settings page in the drop-down menu that appears when you click on your avatar after logging in.
-
To access, correct, or export your data, or to have questions answered about your privacy please direct your request or query to
admin@spiritof2021.online
8. Children’s Privacy
The Site is intended for high school students, college undergraduates, and the general public. Nudge.online does not knowingly collect data from children under 13 (or 16 in relevant jurisdictions).
This document is maintained with assistance from Iubenda tools for legal compliance.