Privacy
This site collects what a booking needs and nothing more. Here is all of it.
Cookies
Browsing the site sets no cookies. Three are set, each only when you do the thing it is for. All three are “httpOnly” (the page’s own scripts cannot read them) and are sent only to this site:
nt_hold: set when you hold places for a walk. It lets this browser, and no other, return to its own checkout. It lasts seven days and holds only signed booking references.nt_session: set when you sign in, and gone when you sign out. It lasts up to 30 days.nt_2fa: set for five minutes between your password and your two-factor code, if you use two-factor sign-in.
What stays in your browser
Four small things sit in your browser’s local storage, which is never sent to us or to anyone:
net.currency: the currency you chose for displaying prices. Charges are always in US dollars.net.impression: a number from 1 to 9999, drawn once, that makes your copy of each print land differently and is pencilled in the margin of every sheet.net.inks.*: the colours you chose on the home stage, one entry per print.net.view: whether you chose to see every picture as a photograph rather than a print, from the button in the header or the menu.net.brushandnet.brush.ink: whether the paint trail is switched off, and which pigment you chose for it, from the controls in the footer.
Clear your site data and all four go. If your browser blocks local storage, the site still works: you get a new impression number each visit.
What we keep when you book
A booking keeps the lead guest’s name and email address, a phone number if you gave one, any notes for the guide (allergies, access), the walk, the day, the number of guests, the price, and the payment’s receipt number and status. We never see or store a card number: you pay on PayPal’s or Stripe’s own page, or, on this sample site, in a test checkout that refuses real cards and never sends a card number anywhere. Places you hold but do not pay for are released after ten minutes, and what you typed stays only on that unpaid booking.
What we keep for an account
Your name, your email address, a hash of your password (never the password), the browsers you are signed in on (named like “Chrome on macOS”, with when they were last used), and, if you turn it on, a sealed two-factor key and the hashes of your backup codes. You can delete the account from the account page at any time: it is removed at once, and bookings you made stay on the studio’s books, because a guide may be expecting you, but are no longer linked to you.
Trip requests, the newsletter and reviews
A trip request keeps what you wrote in the form. The newsletter keeps your email address and whether you confirmed it, which you must do from your own inbox before anything is sent; every letter has a link that unsubscribes you in one click. A review keeps your words and the name you chose to show, and appears on the site only after a person has read and approved it.
We send the email a booking needs: a confirmation and receipt, a reminder the day before, a thank-you with a review link two days after, and a cancellation and refund notice if one applies. Anything marketing carries an unsubscribe link. A copy of every message sent is kept in the studio’s mail log, so a person can see what you were told.
Counting visits
The studio counts how many people look at a walk, start checkout, give their details, choose how to pay and pay. Each count is a number with no name, address or identifier attached, so no count can be traced to you. There is no third-party analytics unless the studio switches on Plausible or Umami, which are cookieless and never run on the account, checkout, booking or admin pages.
Who else sees it
PayPal or Stripe, if you pay with them: you leave this site, and they receive your name, email and the amount. Resend, which delivers our email, if it is switched on. Open-Meteo, which our server asks for the weather forecast for the day of your walk: it is told the date and Hanoi’s coordinates and nothing about you. The map buttons on experience pages are ordinary links to Google Maps and OpenStreetMap, and nothing is loaded from them until you follow one. Fonts, images and scripts are served from this site.
A real company
Nét is fictional, and this is a sample store: nothing here is a real booking, and demonstration accounts are public. A real operator would replace this page with its own, naming who holds the data, for how long, and the Vietnamese or local law it falls under.
Last updated 31 October 2026.