🔒 Privacy Policy — Siivooja 2000

Privacy Policy

Last updated: October 3, 2026

Short version: The Siivooja 2000 app collects nothing. No telemetry, no crash reports, no analytics, no license check. Its only network call is an update check when it starts, at most every six hours. The website you're reading sets no analytics or advertising cookies. Email signup is relayed to us by Resend, with Formspree as a fallback.

1. Who we are

Siivooja 2000 is developed by Koodisto Digital (business ID 2829298-1), based in Finland. Contact: [email protected].

2. The software

Siivooja 2000 runs entirely on your Mac. The application:

  • Does not collect, transmit or store any personal data.
  • One automatic update check when the app starts, at most every six hours, to koodisto.org/siivooja2000/dl/version.json. The request contains no user identifier, no cookies and no system information — only a User-Agent header. You can block the check at your network firewall.
  • Does not include analytics SDKs, crash reporters, or third-party telemetry.
  • Does not require a login, license check or activation.

All data the app processes (file paths, sizes, hashes, history records) stays on your local disk. The History store lives at the app's support folder and never leaves the machine.

3. Permissions the app requests

  • Full Disk Access — to read caches, logs and leftover paths across your user domain. Granted via System Settings → Privacy & Security.
  • Trash permission — implicit when you drag the app to /Applications; required for the system Trash.

The app does not request: camera, microphone, contacts, calendars, location, screen recording, or accessibility.

4. Website analytics

The website (koodisto.org/siivooja2000) does not use visitor analytics.

5. Email notifications

If you submit your email address via the signup form, the submission is sent to koodisto.org and relayed to our mailbox by Resend. Your browser does not contact Resend directly. If that relay fails, Formspree is used as a fallback so the message is not lost. We use it solely to notify you about new releases. We do not share or sell email addresses. You can request deletion at any time by emailing [email protected].

Resend's privacy policy: resend.com/legal/privacy-policy. Formspree's: formspree.io/legal/privacy-policy.

6. Cookies

The website sets no cookies. The only thing it may store in your browser is your language choice (the localStorage key siivooja-lang), when you pick a language.

The Siivooja 2000 application itself uses no cookies — it has no web component.

7. Your rights (GDPR)

You have the right to access, correct or delete your personal data. Since the only personal data we possibly hold is the email address you voluntarily submitted, deletion is a single message away: [email protected].

Legal basis for processing

Email correspondence: legitimate interest in responding (GDPR Art. 6(1)(f)). Donation processing data (if relevant in the future): contract (GDPR Art. 6(1)(b)).

Data retention period

Email submitted via the form is relayed to our mailbox, where it is kept for as long as handling the matter requires. The relay service does not retain the message permanently. You can request deletion at any time by emailing [email protected].

Data transfers outside the EU

We use two external services: Resend (email relay) and Formspree (fallback for the same). Where these transfer data outside the EU, the transfer relies on the EU Standard Contractual Clauses (Commission Decision 2021/914).

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi) or your country's national data protection authority if you believe your personal data is being processed in violation of the GDPR.

Your rights in detail

You have the right to: request access to your data, correction, deletion, restriction of processing, object to processing, and the right to data portability. You can exercise your rights by emailing [email protected].

8. Children

Siivooja 2000 is not directed at children under 13. We do not knowingly collect data from children.

9. Changes

If this policy changes, the "Last updated" date above will change too. Material changes will be highlighted on the homepage for at least 30 days.