This page describes exactly what the Normies Yacht Club Official Store does with your data. It is short because the store collects little: there is no database, no analytics, no advertising and no tracking of any kind.

Who is responsible

The Official Store is run by the Normies Yacht Club community. Ask in The Lounge, or reach the club on X at @osaykancuno.

Coming aboard

To enter, you sign a message with your wallet. The signature proves you control the address; it is not a transaction and cannot move your funds or your NFTs. Your wallet address is then checked against the Normies Yacht Club contract on Ethereum to confirm you hold at least one yacht.

That check is a public blockchain read, sent to public Ethereum nodes (publicnode.com, llamarpc.com, ankr.com, cloudflare-eth.com). Those providers see your wallet address and your IP address. Your address is already public on the blockchain.

If you connect through WalletConnect rather than a browser extension, the connection is relayed by WalletConnect's servers.

The one cookie

A single cookie, nyc_crew, is set once you are verified. It holds your wallet address, how many yachts you held at sign-in, and an expiry twelve hours later, signed so it cannot be altered. It is strictly necessary — it is what keeps the door open while you shop — and it is not used for anything else. No consent banner is shown because there is nothing optional to consent to.

Your basket and your choice of day or night mode are kept in your own browser's local storage. They never leave your device, except that the items you are buying are sent when you check out.

Buying something

At checkout you provide a name, an email address, a delivery address and optionally a phone number. These go to two companies, and no further:

• Printful — prints and ships your order. It receives your name, delivery address, phone number if given, and what you bought. Printful is based in the United States and operates production facilities in several countries, so your delivery details may be processed outside the EU.
• Stripe — takes the payment. It receives your email address and the amount, and handles your card details directly. The store never sees your card number. Your wallet address is attached to the payment so your order can be matched to you.

Both companies publish their own privacy policies, and both act as processors for the information they receive here.

Hosting and fonts

The site runs on Vercel, which keeps short-lived server logs containing IP addresses — the ordinary record any web server keeps. The typeface is loaded from Google Fonts, which means Google receives your IP address when the page loads. Product images are served from this site itself, so browsing the shelves tells no one else what you were looking at.

What is kept, and for how long

The store itself keeps nothing. There is no customer database and no mailing list: sessions live only in the signed cookie in your browser and expire after twelve hours. Order records live with Printful and Stripe, who keep them as long as their own tax and accounting duties require.

Your rights

Under the GDPR you can ask for a copy of your data, ask for it to be corrected or erased, or object to its processing. Because the order records sit with Printful and Stripe, a request will be passed to them. Ask in The Lounge, or reach the club on X at @osaykancuno.

You also have the right to complain to your national data protection authority — in Italy, the Garante per la protezione dei dati personali.

Last updated 16 August 2026.