Security & privacy
Your content is yours — and stays private until you publish.
NodiMagazines is made and run by Nodiver d.o.o., a company in Slovenia, under the EU General Data Protection Regulation. Here is how we protect your organisation, your files and your readers.
EU
company and GDPR — Nodiver d.o.o., Koper, Slovenia
Private
files until you publish, in an EU-jurisdiction bucket
60 min
links to files expire; nothing is listed in public
0
card numbers we see — payments are handled by Stripe
Your organisation, kept apart
- Every request runs in the context of one organisation; data of other organisations is never in reach.
- Automatic tests check that one organisation cannot read or change another’s data.
- Roles — owner, admin, editor, viewer — decide who may publish, invite or pay.
Files
- Stored in a private Cloudflare R2 bucket under EU jurisdiction, without public access.
- Released only after a check (sign-in, publication, password or purchase), through signed links that expire after 60 minutes.
- Uploads are checked by their content, not their name; SVG uploads are refused.
Accounts & sign-ins
- Passwords are stored only as one-way hashes.
- Google reCAPTCHA v3 and rate limits keep bots out of sign-ins and registrations.
- Password reset links work once, for 60 minutes; invitations are stored hashed and expire after 7 days.
Publishing
- Published versions never change; a correction is a new version, and earlier ones can be restored.
- Publishing, withdrawing and restoring are written to an audit log.
- Password-protected and paid e-Publications are checked on the server before any page is released.
Your readers
- Our own statistics use no tracking cookies.
- Your marketing tags (Google, Meta, LinkedIn) load only after the reader agrees.
- Readers can delete their free account themselves, at any time.
GDPR
- For your content and your readers we are your processor (Art. 28 GDPR); our Terms and Privacy policy are the data processing agreement.
- We use only the sub-processors named in the Privacy policy and tell you before adding new ones.
- Data is deleted when you delete it or close your organisation.
Sub-processors
Who processes data for us
- Hostinger — hosting of the application and e-mail delivery.
- Cloudflare — file storage (R2, EU jurisdiction) and customers’ own domains.
- Stripe — payments, subscriptions and payouts to publishers.
- Google — reCAPTCHA on sign-ins and registrations.
Details are in the Privacy policy and the Terms of service. Questions about security or a signed DPA? Write to us or e-mail info@nodimag.com.
Your next catalogue, magazine or report — online today.
Start free. Upgrade when you publish more, need protection or want to sell access. No credit card for the free plan.