Privacy policy — nipaluna

This policy explains how Mafia Publishing (ABN 37 709 073 991) handles personal information as the owner and publisher of nipaluna and operator of the Mafia account console at mafia.net.au. Its address is 252 Annerley Road, Dutton Park QLD 4102. The public masthead is deliberately quiet: it has no advertising technology, behavioural tracking or browser analytics.

What we collect

When you read a public masthead, Cloudflare receives the connection information needed to deliver and protect the site. The masthead itself does not set cookies. If you follow an advertiser link, we record the masthead, the listing, whether it was paid, and the country associated with the request. We do not put your IP address, name, email address or a device identifier in that click record, and the advertiser receives no referrer information from us.

If you use the Mafia console, we may collect:

your email address and any name or contact details you provide;
your listings, directory details, images, bids and moderation history;
Stripe payment references, amounts, status and transaction dates;
hashed sign-in, session, IP-address and browser information used to authenticate accounts and prevent abuse; and
email delivery records, support messages, commercial-email preferences, consent or other contact-basis evidence, and operational logs; and
Frankie assistant conversations, requested actions, decision records, handoffs and reviewed learning proposals.

Card numbers and security codes go directly to Stripe and do not pass through our servers.

How we collect and use it

We collect information from you, from your browser when you use the service, and from service providers such as Stripe when they confirm a payment. For carefully reviewed business outreach, we may also record permission supplied directly by a recipient, an existing relevant business relationship, or the source and relevance of a conspicuously published work address. Publication of an address alone does not automatically make it suitable for marketing.

We use information to sign you in, operate and secure the service, review and publish listings, process payments, issue invoices, send service and renewal messages, measure advertiser click-throughs, answer support requests, prepare and audit actions requested through Frankie, and—with a recorded lawful basis and relevance—send offers about Mafia Publishing mastheads. Commercial messages identify the sender and include an easy unsubscribe. Unsubscribe requests, complaints and delivery failures are recorded so further commercial mail can be suppressed.

Information placed in a listing is intended for publication. A directory entry may publicly show a business phone number, email address, service area and website. Do not submit personal information that you do not have authority to publish.

Cookies and bot protection

Public mastheads set no cookies. The Mafia console uses essential, secure cookies to keep an account signed in and to complete passwordless login. Its sign-in page may use Cloudflare Turnstile to distinguish people from automated abuse. These features are necessary to provide and protect the account service; they are not used by us for advertising.

Who we disclose information to

We disclose only what is reasonably needed to providers that help run the service:

Cloudflare for hosting, storage, security and Turnstile;
Stripe for payment processing; and
Resend for transactional and individually approved commercial email.

We may also disclose information where required by law, or where reasonably necessary to investigate fraud, abuse or a threat to safety. We do not sell personal information.

These providers operate internationally. Personal information may be disclosed to or processed by recipients outside Australia, including in the United States. Their practices are described in the Cloudflare privacy policy, Stripe privacy policy and Resend privacy policy.

Storage, security and retention

We use access controls, restricted service credentials, secure cookies and cryptographic hashing for sign-in codes and session identifiers. No internet service can promise absolute security.

We keep personal information only for as long as it is needed for the purposes above or required by law. Financial and transaction records may be retained after an account closes. Suppression records may be kept so we can continue respecting a request not to receive commercial email. Expired sign-in and session records are removed as part of routine housekeeping.

Access, correction and deletion

Email frankie@nipaluna.com.au to ask what personal information we hold about you, request a correction, close an account or request deletion. We may need to verify your identity first, and may retain records that the law requires us to keep.

Archiving a listing removes it from the generated masthead after the next publish. Copies may remain temporarily in caches, search indexes or independent web archives.

Privacy complaints

Send a complaint to frankie@nipaluna.com.au with enough detail for us to investigate. We will acknowledge it and respond within a reasonable time. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

You can also write to Mafia Publishing (ABN 37 709 073 991), 252 Annerley Road, Dutton Park QLD 4102.

Changes to this policy

We will update the date above when this policy changes. If a change materially affects advertisers, we will also notify affected account holders where reasonably practicable.