Privacy Policy
Last updated: 1 November 2026
This policy explains what personal data nxip collects, why, and what rights you have over it. It covers nxip.dev and nx-ip.com, operated by Sonny Wigmore, trading as nxip, of Poole, Dorset, United Kingdom ("nxip", "we", "us"), the controller of the data described below.
1. What we collect
- Account data: the email address and organization name you sign up with.
- IPAM data: the pools, subnets, and allocations you create through the API or Terraform provider. This may include names or descriptions you choose to give them; it does not include any data about the actual hosts or traffic on your networks.
- API key material: we store a one-way cryptographic hash and a short prefix of each API key, never the raw key itself.
- Audit log: a record of each change made in your organization (to pools, subnets, addresses, API keys, invitations and organization links), with which fields changed, the key and user that made the change, and their IP address and user agent. It also records sign-ins, invitations being accepted and billing events, with the email address involved rather than a link to a user record. It does not record every request, and it does not record anything that happens before your organization exists, such as a signup request or a sign-in link requested for an address with no account, which appear only in the request logs below. It is currently kept for the life of your account, and deleted with it.
- Request logs: for every API request: the requesting IP address, user agent, endpoint, and outcome, written to our hosting provider Fly.io's logs for security, abuse prevention and debugging. These are kept for Fly.io's standard log retention period, and are not deleted when you close your account.
We do not directly collect or store payment card information. Payments for paid plans are handled entirely by our payment processor, Stripe (see Section 3); nxip receives your email address, your subscription status and Stripe's references for your customer record and subscription, never card details.
Analytics on this website, only if you accept. This marketing site and its docs, at nx-ip.com, can load Google Analytics and Microsoft Clarity, and the dashboard's two sign-in pages at app.nx-ip.com can load Google Analytics, so we can see how many people who start signing up finish. Neither loads until you have accepted it, using the banner shown on your first visit: until then there is no analytics script in the page, no request to Google or Microsoft, and no analytics cookie in your browser. One decision covers both addresses, so you are asked once. Rejecting takes one click, keeps it that way, and we do not ask you again. Nothing that identifies you, such as your email address or organization name, is sent to Google or Microsoft at any point.
If you accept, this is what is set and who gets it:
- Google Analytics 4, provided by Google, sets the
_gaand_ga_<id>cookies on nx-ip.com and its subdomains, which last up to two years, and sends Google the pages you view, the link or search that brought you here, your device and browser, and an approximate location derived from your IP address. We use it to see which pages are read and which channels bring people to the site. - Microsoft Clarity, provided by Microsoft, sets the
_clckand_clskcookies on nx-ip.com, lasting up to one year and one day respectively, and Microsoft may set cookies of its own on clarity.ms. Clarity records a replay of your session: the pages you visit, how far you scroll, where you move the pointer and what you click, alongside the same kind of device and approximate-location data. We use it to see where the site confuses people. Clarity masks text typed into form fields, but treat a replay as capable of capturing what was on your screen.
Our legal basis for all of this is your consent (UK GDPR Article 6(1)(a), and regulation 6 of the Privacy and Electronic Communications Regulations for the cookies themselves). Google Analytics is told that advertising storage and personalisation are refused for every visit. Your decision is recorded in a first-party cookie, nxip_consent, on nx-ip.com and its subdomains, holding only the choice you made and a version number, for 12 months. That record is not analytics, is sent to nobody, and exists only so neither address asks you again.
To withdraw or change your consent, use the control below. It clears the stored decision, expires the analytics cookies this site can reach, reloads the page with nothing analytics-related running, and asks you again. Data already sent to Google and Microsoft is then held under their own notices: Google's privacy policy and Microsoft's privacy statement.
Page counts without cookies. nx-ip.com and the dashboard's two sign-in pages also send each page view to Cloudflare Web Analytics: the page address, the page that linked to it, your browser and device type, and your country. It sets no cookie, stores nothing in your browser and does not follow you between pages, so it needs no consent and runs whether or not you accept the banner; it gives us honest totals, including for visitors who reject analytics. Our legal basis is legitimate interest in knowing how many people use the site. It is never loaded once you are signed in to the dashboard.
2. Why we collect it, and our legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Email, org name | Create and operate your account | Performance of a contract |
| IPAM data | Deliver the Service itself | Performance of a contract |
| Request logs | Security, abuse prevention, debugging | Legitimate interest |
| Email (verification/contact) | Send verification and service emails | Performance of a contract |
| Email (product updates) | Occasional email about new features, sent to existing users about our own product. Unsubscribe any time, does not affect verification/service email. | Legitimate interest (soft opt-in) |
"Soft opt-in" means: because your email was collected when you created your account, and this is us marketing our own product to an existing user rather than a cold contact, UK electronic-marketing rules (PECR) let us send these without a separate consent checkbox at signup, provided we say so clearly at that point (we do, on the signup page) and give a working opt-out on every email (we do, a one-click link that needs no login). Unsubscribing only stops product-update email; account and service email (like billing or security notices) continues regardless, since that's sent under a different legal basis (performance of a contract) that doesn't depend on this consent mechanism.
3. Who we share it with
We use a small number of infrastructure providers to run the Service. We don't sell data to anyone.
If you accept analytics on this website (see Section 1), Google and Microsoft also receive data about your visit to nx-ip.com and the dashboard's sign-in pages, as described there. They are not sub-processors of your nxip account: they see visits to this marketing site only, never anything inside your organization, and nothing at all unless you accept.
The full list of these providers (sub-processors), with what each one does, what data it sees, and where, is kept in one place, on our trust page. It includes Stripe, which processes payments for paid plans (see Stripe's own privacy policy for how they handle payment data directly), and Sentry, which records errors from the Service so we can fix them. Changes to the list are published there before they take effect.
Some of these providers process data outside the UK. Resend's and Cloudflare's data processing agreements (Resend's DPA, Cloudflare's DPA) incorporate the UK and EU Standard Contractual Clauses for this kind of transfer. Fly.io self-certifies under the EU-U.S. and UK-U.S. Data Privacy Frameworks. Stripe certifies under the EU-U.S. Data Privacy Framework and its UK Extension. Sentry is a US company that stores our error reports in its EU region, in Germany; its DPArelies on the Data Privacy Framework, including the UK Extension, with the Standard Contractual Clauses as amended by the UK Addendum as the fallback. Tigris, which stores our database backups, is a US company; itsDPAincorporates the UK Addendum to the Standard Contractual Clauses for transfers out of the UK; the backup storage itself is restricted to London and Amsterdam. Google Workspace, which hosts our mailbox, applies its data processing addendum, which incorporates the Standard Contractual Clauses with the UK Addendum, and Google LLC also certifies under the EU-U.S. Data Privacy Framework and its UK Extension. We have signed data processing agreements with Tigris, Resend and Cloudflare. We do not otherwise share your data with third parties, except where required by law.
If your organization requires its own signed Data Processing Agreement covering how nxip processes personal data on your behalf (for example, if a subnet or pool description you create happens to include someone's name), email hello@nx-ip.com and we'll provide one.
4. How long we keep it
Account and IPAM data is kept for as long as your account is active. The audit log is currently kept for the life of your account and deleted with it; request logs are kept for Fly.io's standard log retention period, as Section 1 says. If you delete your account (via hello@nx-ip.com), we delete the associated organization, pool, subnet, and allocation data; a residual record may be kept briefly where needed for security or legal purposes.
5. Free tier data note
The Free tier is an evaluation offering with no guaranteed data durability. See Section 5 of our Terms of Service for details. This is a service-level position, not a change to how we handle personal data under this policy: your account email is still processed as described above regardless of tier.
6. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Request erasure of your data;
- Restrict or object to certain processing;
- Receive your data in a portable format.
To exercise any of these, email hello@nx-ip.com. If you're in the UK and unhappy with our response, you can complain to the Information Commissioner's Office.
7. Security
API keys are never stored in raw form, only a one-way SHA-256 hash of the key. A key is a long random value we generate, not a password you chose, so it cannot be guessed or brute-forced the way a password can, and the hash cannot be turned back into the key. Access to production infrastructure is limited to the people operating the Service. No method of transmission or storage is perfectly secure, so we can't guarantee absolute security.
8. Data breach notification
If we become aware of a security incident that puts your personal data at risk, we will notify affected users without undue delay, and notify the ICO where the law requires it, consistent with our obligations under UK GDPR.
9. Children
The Service is not directed at, and we do not knowingly collect data from, anyone under 16.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
11. Contact
Questions about this policy: hello@nx-ip.com.