🔒 Privacy Policy — Siivooja 2000

Privacy Policy

Last updated: April 26, 2026

Short version: The Siivooja 2000 app collects nothing. No telemetry, no crash reports, no analytics, no license check, zero outbound network calls. The website you're reading uses GA4 with your consent. Email signup is relayed to us by Resend, with Formspree as a fallback.

1. Who we are

Siivooja 2000 is developed by Koodisto Digital (business ID 2829298-1), based in Finland. Contact: info@koodisto.org.

2. The software

Siivooja 2000 runs entirely on your Mac. The application:

  • Does not collect, transmit or store any personal data.
  • Does not make any outbound network connections — it is fully offline.
  • Does not include analytics SDKs, crash reporters, or third-party telemetry.
  • Does not require a login, license check or activation.

All data the app processes (file paths, sizes, hashes, history records) stays on your local disk. The History store lives at the app's support folder and never leaves the machine.

3. Permissions the app requests

  • Full Disk Access — to read caches, logs and leftover paths across your user domain. Granted via System Settings → Privacy & Security.
  • Trash permission — implicit when you drag the app to /Applications; required for the system Trash.

The app does not request: camera, microphone, contacts, calendars, location, screen recording, or accessibility.

4. Website analytics

The website (koodisto.org/siivooja2000) uses Google Analytics 4 (GA4) to understand traffic patterns. GA4 only loads after you click "Accept" on the cookie banner. If you decline, no analytics scripts are loaded.

What GA4 collects when accepted:

  • Page views and navigation patterns
  • Approximate geographic location (country/city, IP anonymization enabled)
  • Device type, browser, OS
  • Outbound link clicks (manual, signup events)

5. Email notifications

If you submit your email address via the signup form, the submission is sent to koodisto.org and relayed to our mailbox by Resend. Your browser does not contact Resend directly. If that relay fails, Formspree is used as a fallback so the message is not lost. We use it solely to notify you about new releases. We do not share or sell email addresses. You can request deletion at any time by emailing jussi@musiikkituotanto.fi.

Resend's privacy policy: resend.com/legal/privacy-policy. Formspree's: formspree.io/legal/privacy-policy.

6. Cookies

Cookie consent is managed with KoodistoCookie (cookie.koodisto.org), Koodisto Digital's own consent tool. Your choice is stored in one localStorage key: kc_consent. If you accept, GA4 sets its own cookies (_ga, _ga_*) for traffic measurement. If you decline, no other cookies are set.

The Siivooja 2000 application itself uses no cookies — it has no web component.

To demonstrate consent (GDPR Art. 7(1)), each choice is logged: the selections made, a timestamp, the consent text version, the UI language and a one-way SHA-256 identifier derived from the IP address. The IP itself is never stored. Log entries are kept on Cloudflare's EU-region servers and deleted automatically after 24 months.

7. Your rights (GDPR)

You have the right to access, correct or delete your personal data. Since the only personal data we possibly hold is the email address you voluntarily submitted, deletion is a single message away: jussi@musiikkituotanto.fi.

Legal basis for processing

Analytics cookies: your consent (GDPR Art. 6(1)(a)). Email correspondence: legitimate interest in responding (GDPR Art. 6(1)(f)). Donation processing data (if relevant in the future): contract (GDPR Art. 6(1)(b)).

Data retention period

Email submitted via the form is relayed to our mailbox, where it is kept for as long as handling the matter requires. The relay service does not retain the message permanently. You can request deletion at any time by emailing jussi@musiikkituotanto.fi.

Data transfers outside the EU

We use three external services: Google Analytics 4 (analytics, with your consent), Resend (email relay) and Formspree (fallback for the same). Where these transfer data outside the EU, the transfer relies on the EU Standard Contractual Clauses (Commission Decision 2021/914). For Google, also the EU-US Data Privacy Framework.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi) or your country's national data protection authority if you believe your personal data is being processed in violation of the GDPR.

Your rights in detail

You have the right to: request access to your data, correction, deletion, restriction of processing, object to processing, and the right to data portability. You can exercise your rights by emailing jussi@musiikkituotanto.fi.

8. Children

Siivooja 2000 is not directed at children under 13. We do not knowingly collect data from children.

9. Changes

If this policy changes, the "Last updated" date above will change too. Material changes will be highlighted on the homepage for at least 30 days.