← Back to the site

Privacy Policy

NovoTract Holdings LLC · Effective 16 October 2026

This policy explains what NovoTract Holdings LLC ("NovoTract", "we", "us") does with personal information collected through novotract.com. It is written to describe this specific site rather than to cover every situation, so where it is precise, it is precise on purpose.

1. Who we are

NovoTract Holdings LLC is a Wyoming limited liability company. We are private real estate investors. We buy land and houses directly from their owners. We are not real estate agents or brokers, and we do not act on your behalf.

For any question about this policy, or to exercise any right described below, email [email protected].

2. What we collect when you use the form

This section is about what you send us: the offer forms and the help window. Section 3 covers what we collect automatically from every visitor. We do not buy personal information, and we do not gather it from data brokers or public records to build profiles.

What	Why we need it	Required
First and last name	To address you and identify your enquiry	Yes
Email address	To reply to you	Yes
Phone number	To follow up about your property	Yes
Property details, if you are selling land: state, parcel or tax ID, acreage, ownership status, name on the title, and how quickly you want to sell	To evaluate whether the property is one we can buy	Partly
Property details, if you are selling a house: address, city, state, ZIP code, type of property, condition, who lives there, ownership status, how quickly you want to sell, and anything else you choose to tell us	To evaluate whether the property is one we can buy	Partly
What you write in the help window: the topic you choose, your message, and a phone number if you give one	To answer you	Partly
A one-way hash of your IP address	Abuse and spam prevention only	Automatic
The country your connection came from, which Cloudflare works out from your network address and tells our server	To spot fraud. We buy property only in the United States, and people who pose as the owner of land that is not theirs often write from abroad	Automatic
The date and time of your submission	Record keeping	Automatic
A record of the boxes you ticked: the exact wording shown to you, which boxes you ticked, and when	To show what you agreed to, and to know whether we may call or text you	Automatic
Your browser's user-agent string	Part of the same record of what you agreed to	Automatic

3. What we collect automatically when you visit

We measure how this site is used. The software is called Umami and it runs on our own server, under our own control. It is not a service we send your visit to, and there is no analytics company involved at any point.

For each visit we keep:

What	Why we need it
Which pages you looked at, in what order and when, including anything after the question mark in the address	To see which parts of the site people read, which they skip, and which advertisement or link brought them
The site or search you arrived from, if your browser sends it	To know where enquiries come from
Your browser and operating system, in general terms such as Chrome on Windows	To know what we have to make the site work on
Whether you are on a phone, tablet or desktop, and your screen size	The same reason. Most of our visitors are on a phone
Your browser's language setting	To know whether we should offer another language
Your country, region and city	We buy land and houses in particular states, so we need to know roughly where interest is
A visit identifier	To count one person reading four pages as one visit and not as four
Five named steps, if you take them: opening the offer form, finishing step 1, sending it, opening the help window, sending a help message. When a form does not go through: the names of the boxes it asked you to fix, such as "phone", or that our server or your connection failed. And if you visit from outside the area we work in, that you were shown the page saying so, and which page you asked for	To see where people stop, whether the form itself stopped them, and how many people reach us from places we do not work. We keep the fact that the step happened and never anything you typed into it
How quickly the page loaded and responded on your device	To find the pages that are slow on a real phone rather than on ours

Two things that sentence does not cover, said plainly. Cloudflare sits in front of this site and sees your address before we do, which is how it filters attacks. And our web server keeps an ordinary technical log of requests, which can include a network address, for fourteen days, because that is what any web server does and it is how we see an attack while it is happening. Neither of those is analytics and neither is joined to your enquiry.

None of this is joined up to your enquiry. The analytics records and the enquiry records live in separate databases, nothing in the analytics records carries your name, and we do not look up which visit belongs to which person who wrote to us.

4. What we do not collect

• No Social Security number, date of birth, or government ID.
• No bank, card or payment details. This site takes no payments and has no checkout, so there is no payment information here for anything to capture.
• No advertising identifiers, no advertising pixels, and no tracking of you across other websites. Nothing we collect is used for advertising, and the records of your visits stay on our own server, so there is nothing to track you with.
• No third-party analytics. See section 3.
• No precise location. We work out country, region and approximate city from your network address, and that is as close as it gets. Nothing on this site asks your device for its GPS position. Any street address we have is one you typed in yourself, such as the address of a house you are selling.
• No recording of your visit. There is no session replay and no heatmap on this site. Nothing plays your visit back, and we do not collect where you moved your pointer, where you clicked or how far you scrolled. Section 3 says more about that.
• No microphone, camera, contacts or files. This site never asks for them.

If you type additional information into a free-text field, we receive it. Please do not enter anything sensitive that we have not asked for.

5. Why we use it

For two purposes, and they are kept apart.

What you send us through the form is used to evaluate the property you told us about and to contact you about it. That includes replying by email, calling or texting you about your enquiry if you permitted it, and keeping records of our dealings with you. The country it was sent from is used for one thing only, to spot fraud, such as somebody posing as the owner of land that is not theirs.

What we collect automatically is used to understand how the site is used and to make it better. Which pages get read, where people give up on the form, whether something is broken on a particular phone. That is the whole of it.

We do not use any of it for advertising, we do not build marketing profiles, we do not combine the two sets of records to study any individual person, and we do not use it to make automated decisions that produce legal effects about you.

6. Selling and sharing

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months. There is no analytics company, no advertising network and no data broker in this picture at any point, which is the reason we run our own analytics rather than using somebody else's. Google, which hosts our email as described below, runs an advertising business elsewhere, but under its Google Workspace terms it does not use our email for advertising.

Mobile numbers and text messages. We use your mobile number only to call or text you about your enquiry and your property, and only if you ticked the box that allows it. We do not sell, rent or share mobile phone numbers, or text-message opt-in data and consent, with third parties or affiliates for their marketing or promotional purposes.

Your information reaches these parties and no others:

• Hetzner Online GmbH, a German company, which rents us the server that runs this site and holds both databases. That server is in Helsinki, Finland. Section 13 explains what that means. Hetzner provides the machine and does not use what is on it for its own purposes.
• Cloudflare, Inc. which sits in front of our site and filters malicious traffic. Your request passes through their network to reach us, and their anti-robot check protects the form.
• Google LLC, an American company, which hosts our email through Google Workspace. When you send us an enquiry, a notification containing what you sent is delivered to the mailbox we read there, and our replies to you and anything you email us are kept there too. Google may store that mail in the United States or in other countries. Section 13 covers that too.
• Telnyx LLC, an American company, which delivers our text messages. When we text you, your mobile number and the message pass through its network. It carries them for us and does not use them for anything of its own.
• Professional advisers such as a title company, attorney or accountant, and only where a transaction with you actually requires it.
• Anyone we are legally required to disclose to, such as in response to a valid subpoena or court order.

The first four are suppliers who carry or hold information so that the site works. They are bound by contract to use it only to provide that service to us and not for anything of their own. None of them is paid in data and none of them is given data as payment.

7. How long we keep it

We keep enquiry records for two years from the day you send them, so that we can answer questions about a past dealing and meet record-keeping obligations. Two years from the day you sent it, not two years from the last time we spoke, because that is what the deletion job actually measures and we would rather this page match the code than describe an intention. After that the name, email, phone and message are erased from the record. You can ask us to delete yours sooner, as described below.

The record of what you agreed to is kept for five years, which is longer. It is the only proof we have of what you were shown and what you permitted, so we keep it for as long as a claim about a call or text could realistically be brought. If you ask us to delete your information, we will delete the enquiry and keep only this consent record, together with a note that you asked us to stop.

What we collect automatically is kept for less time, and it is deleted by a job that runs on a schedule rather than when we get round to it:

What	How long
Visit records: pages, browser, device, country	400 days, then deleted
The web server's technical request log	14 days, then deleted
Counts and totals that are not about any one visit	Kept

Visit records are kept for 400 days so that one year can be compared with the next, and no longer. If you would rather we counted nothing at all, section 9 says how.

8. Cookies and similar technology

This site sets no advertising cookies and no analytics cookies. Our analytics genuinely does not use cookies, and it does not set one to recognise you either. That is not a wording trick. There is no cookie anywhere in the software, and the way it tells one visit from another is described in section 3.

Cloudflare may set a cookie that is strictly necessary to tell human visitors from automated traffic and to protect the site from attack. Cloudflare's anti-robot check on the form sets a strictly necessary cookie for the same purpose. Neither is used to track you across other websites.

Your browser stores a few small values for this site, and none of them is ever sent to us. Two of them remember what the help window has already done, so that it does not nudge you twice, and they disappear when you close the tab. The others are the do not count flag from section 9, if you have set it, and a note of whether you set it yourself or your browser sent a signal. They live on your device only, they go when you clear your browsing data, and clearing them switches the opt out off again.

9. Your choices and controls

Three things you can do, none of which requires you to ask us or to tell us who you are.

• The "Do not count my visit" button in the footer of any page. It sets a flag in your own browser, and the analytics checks that flag before it sends anything, so your visit is not counted at all. Once it is set the button reads "Not counting this browser. Turn it back on", so you can always see which way it is and change your mind. The flag stays on your device and is never sent to us, so it will not follow you to another browser or another device, and clearing your browsing data clears it too.
• Do Not Track or Global Privacy Control. If your browser or an extension sends either signal, nothing about your visit is counted. Some browsers have one built in and for others it is a free extension. We honour both everywhere, not only in the states whose law makes a signal binding. You set it once and every site that respects it obeys.
• Email us. Write to [email protected] and say what you want stopped or deleted. If you have already sent us an enquiry, this is the way to reach the information attached to it, because the browser controls above only affect what happens from that point on and cannot reach back to a form you have already sent.

You never have to give a reason, and none of it changes how we deal with you.

10. Your rights

Depending on where you live, United States state privacy laws may give you the rights below. We extend all of them to every visitor regardless of state, because it is simpler and fairer than checking.

• Know what personal information we hold about you and how we use it.
• Access a copy of it.
• Correct anything inaccurate.
• Delete it, subject to any record we must keep by law.
• Opt out of sale or sharing. There is nothing to opt out of, because we do not sell or share personal information, and the suppliers named in section 6 are not allowed to use it for their own purposes.
• Opt out of being counted as section 9 describes, at any time and without telling us who you are.
• Limit the use of sensitive personal information. We do not collect any. We ask for no Social Security number, no government ID, no financial account, no precise location, no health information, and nothing about race, religion or union membership.
• Not be discriminated against for exercising any of these rights. We will not refuse to deal with you, or change what we offer, because you did.

To exercise any of them, email [email protected] from the address you used, or tell us enough to locate your enquiry. We will respond within 45 days. If we need longer we will tell you why before that deadline passes. There is no charge. An authorised agent may act for you if you give them written permission and we can verify it.

One honest limit. We cannot find your visits for you, because nothing in them is attached to your name and we have no way of working out which visit was yours. If you ask us to delete your visit data we will tell you that, rather than pretend to have done it. What we can do, and will, is stop counting you from then on.

11. How we protect it

• Everything you send is encrypted in transit over HTTPS, with HSTS enforced.
• What you type into the form reaches us only when you press a button that sends it. Nothing on this page watches your typing or reports it as you go.
• Your IP address is hashed before storage on the form, and the analytics keeps none at all, both as described above.
• The databases are not reachable from the public internet.
• Our server accepts connections only from Cloudflare, so it cannot be reached directly.
• Access is limited to people who need it to deal with your enquiry, which for a business of this size means one person.

No system is perfectly secure, and we cannot guarantee that a determined attacker will never succeed. If a breach affects your information we will notify you as required by law.

12. Children

This site is for adults selling land or houses. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

13. Where your information is handled

This needs stating plainly, because it is not what you would guess from the rest of this policy.

So the path your information takes is this. You send it from wherever you are. It travels to Finland and is stored there, and a copy of what you wrote arrives by email in the mailbox Google hosts for us. That copy, our replies to you and anything you email us may be stored in the United States or in other countries.

What that means in practice:

• If you are in the United States, which is almost everyone who writes to us, the enquiry database and the analytics are held on European soil, and our email, including the copy of your enquiry, is held by Google, an American company. Hetzner, which rents us the website server, is bound by European data protection law in how it handles what sits on it, which is a stricter regime than most American states impose. Google is bound by its contract with us to use our email only to provide that service to us. Holding information in Europe also means that it could in principle be reached by a lawful order from a Finnish or European authority as well as an American one, and emails that reached us before 23 September 2026, which are still on a mail server in the United Kingdom until we delete them, could be reached by a British one. We have never received such an order from anywhere.
• If you are in the European Union or the United Kingdom, our position is that the General Data Protection Regulation and its British equivalent do not apply to us. We have no office, no staff and no establishment in Europe or Britain, we do not offer anything to people there, we do not monitor anyone there, and we buy land and houses only in the United States. Renting a server in a country is not by itself enough to bring a company outside that country under its data protection law. That is our honest reading of the rules and it may be tested one day.

We are not going to rely on that reading to give you less. If you are in the European Union or the United Kingdom and you want access to your information, correction, deletion, restriction, a copy of it in portable form, or you want to object to what we are doing, write to [email protected] and we will handle it as though those rules applied. The rights in section 10 are already close to the same list. Where the two differ, you get whichever is better for you.

We chose these suppliers because they were reliable and affordable, not for any reason to do with which laws would apply to them. We are telling you where your information goes, as far as we know it, because you cannot check for yourself and you are entitled to know.

14. Changes

If we change this policy we will update the effective date at the top. Material changes will be described here rather than made quietly.

The last change was on 16 October 2026. We now text the people who ask us to, through Telnyx LLC, an American company that delivers text messages. Section 6 names it and says, in so many words, that we do not sell or share mobile numbers or text-message consent for anyone's marketing, and section 13 says where text messages travel. The box on our forms that allows calls and texts now also says what the texts are about, that message frequency varies, and that replying HELP gets help. Nothing else changed.

Before that, on 13 October 2026, we started showing this site only in the area we work in. Anywhere else you see a page saying it is not available in your area, and our analytics notes that you were shown it and which page you asked for, with the details section 3 lists for any visit, such as your country, browser and device. Section 3 says so. Nothing else changed.

Before that, on 11 October 2026, our analytics started noting when a form does not go through: the names of the boxes it asked you to fix, such as "phone", or that our server or your connection failed. Never what you typed. Section 3 says so. Nothing else changed.

Before that, on 7 October 2026, we started keeping the country each form or message is sent from. Cloudflare works this out from your network address, which it already sees in order to deliver this site, and tells our server. We use it only to spot fraud: we buy property only in the United States, and people who pose as the owner of land that is not theirs often write from abroad. Section 2 lists it and section 5 says what it is for. Your network address itself is still not kept, and nothing else changed.

Before that, on 3 October 2026, we started buying houses as well as land, and the site got a form for each. Section 2 lists what the house form asks for: the address, city, state and ZIP code of the house, what type of property it is, its condition, who lives there, its ownership status, how quickly you want to sell, and anything else you choose to tell us. Anything you send from the land page or the house page also notes which of the two it came from. Section 2 now also lists what the help window sends us, which it should have done before. Sections 1, 3, 12 and 13 no longer say that we buy only land, section 4 now says where a street address can come from, and sections 1 and 3 of the Terms of Use say the same. Nothing changed about our analytics, the values your browser stores, or how long we keep anything.

Before that, on 23 September 2026, we moved our email from a mail server we rented in the United Kingdom to Google Workspace, which is run by Google LLC, an American company. The copy of an enquiry that reaches us by email, our replies to you and anything you email us are now held by Google, which may store them in the United States or in other countries. Emails that reached us before that day remain on the mail server in the United Kingdom until we delete them. Sections 6 and 13 of this policy, and section 12 of the Terms of Use, now say so, and we reworded a sentence each in sections 3, 4 and 10 that no longer fit. Nothing else about what we collect has changed.

Before that, on 4 September 2026, we turned session replay and heatmaps off, took out the code that did the recording, and removed the section of this policy that described them. The tables that would have held recordings and heatmap points are empty, so nothing was ever recorded. This change makes what we collect smaller, not larger. We count visits now, and nothing more.

15. Contact

NovoTract Holdings LLC
[email protected]