Privacy Policy
Who is responsible
This website is operated by 宜都市琯辽商贸有限公司. For privacy questions, access, correction or deletion requests, contact developer@neremai.com.
Scope
This policy covers this website only. The NEREMAI mobile app is not covered here; a separate privacy policy will be published when the app is released.
What we collect on this website
- Email address — required to manage your Early Access reservation. Stored in normalized form.
- Country (required) — where you are based, chosen from the country list on the form. It is used for market research and prioritization only; it is not a list of confirmed shipping or payment markets and does not guarantee availability in your country.
- Ring size preference (optional) — a manufacturer ring size from 8 to 14 (each shown with its inner diameter in millimetres), "Not sure yet", or "My size isn't listed". The size numbers are the manufacturer's model sizes.
- Marketing preference (optional) — a yes/no choice about product news emails, recorded separately from your reservation together with the consent version shown to you.
- Market research answers (optional) — your purchase-intent answer (Very likely / Maybe / Just exploring) and a randomized hypothetical price group shown during your visit. The group is one of three (A, B or C); each visitor is shown only one group, which displays a hypothetical price and the price after the 20% launch offer. We record which group was shown and its two amounts together with your answers. These are research answers and hypothetical amounts only: they are never purchase commitments, and no product price has been announced.
- Anonymous display counts — a simple integer counter of how many times each price group (A, B or C) is displayed. The counter stores only the group letter and a number: no email address, IP address or device fingerprint is stored, and we run no third-party analytics.
- Reservation records — status, timestamps and consent version, plus the single-use 20% offer code issued after confirmation (stored encrypted). The offer is subject to our Offer Terms.
- Email delivery signals — our email provider may report a delivery failure (bounce) or a complaint about a message we sent. When we receive such an event, we record its type and the time it was received — the event record does not contain the message recipient — and bounce and complaint events also add the address to a suppression list that stops further sending.
Earlier form versions also asked for a price expectation in price ranges. Those historical answers are kept unchanged for analysis.
We do not collect payment card data on this website. When sales open, payment will be handled by PayPal, whose own privacy terms apply.
How we use it
- To manage your reservation and send the reservation confirmation and offer emails (transactional messages).
- To send product news and updates only if you opted in. Marketing is optional; not opting in does not affect your reservation or your offer.
- To prevent abuse: per-email and per-IP rate limits and a hidden anti-bot field. For rate limiting, IP addresses and email addresses are stored only as one-way keyed hashes, never in raw form; rate-limit records are deleted automatically after 24 hours. Your IP address is not stored in your reservation record.
- To keep the service secure (see Logging below).
Cookies and browser storage
This website sets one first-party cookie, neremai_ea, only after your email is confirmed: it is HttpOnly, SameSite=Strict, expires after 2 hours, and is marked Secure when served over HTTPS. A browser storage entry (localStorage) holds your randomized research price group so it stays the same across tabs and refreshes of this browser for 24 hours, after which it expires and a group may be drawn again. When a group is first drawn, its group name (A, B or C only) is sent once to a first-party counter as an anonymous page display. We do not use advertising or third-party analytics cookies on this website. Checkout pages will load PayPal's payment components when sales open, which may set PayPal's own cookies.
Service providers
- Email delivery: Resend (sending domain mail.neremai.com). We share your email address and the content of the reservation and offer emails with Resend to deliver them; Resend may report back to us when a message cannot be delivered or is complained about.
- Hosting: Sivoro.
- Payments (when sales open): PayPal.
Logging and security
Our application logs record only the request method, path and response status — not IP addresses, confirmation codes or email addresses; recipient addresses in email webhook processing are redacted. Web-server and operating-system logs are separate from the application logs and may contain IP addresses, for example in error or login records. Server logs are kept on a rolling, capacity-limited basis rather than for a fixed number of days.
Retention and deletion
Implemented and automatic today: confirmation links expire after 30 minutes and can be used once; session records expire after 2 hours and expired or revoked sessions are deleted automatically; rate-limit records are deleted automatically after 24 hours. Automated deletion of reservation data is not implemented at this time: we do not operate any periodic automated deletion of reservation records or email history.
Reservation records and email history are kept while Early Access and the related offer operate. You can ask us to access, correct or delete your data at any time by emailing developer@neremai.com; requests are verified and processed manually. Deletion applies to our live database; data may still remain in rotating backups, in records our service providers hold (such as Resend), or where we must keep it to meet legal obligations, and each of those is governed by its own retention rules. We make no promise about how quickly a request will be completed.
Your choices and rights
Marketing emails are optional and can be withdrawn at any time. To withdraw marketing consent, or to request access to, correction or deletion of your personal data, email developer@neremai.com. Such requests are handled manually.
International transfers
Your information is processed on servers operated by our hosting provider and by our email provider Resend; these services may process data in countries other than yours.
Children
This website is not directed at children. If you believe a child has provided personal data through this site, contact developer@neremai.com and we will delete it.
Changes to this policy
Updates will be published on this page with a revised date.