Privacy

Privacy notice

Sopikaa yhteinen aika ilman viestilooppia. This notice explains what Sopisiko collects and why. The controller is Sopisiko.

What we collect - An email address for sign-in, invites and calendar messages. - A nickname and a picture you upload, if you set them. The picture is resized and stored in the database. - Event details: title, description, place, times and answers. - A session cookie and, with the one-time code, an IP address to limit abuse. - The time you joined the Plus waitlist, if you join. - Anonymous data about a partner-link click (idea and placement), without a name or email.

Why The legal basis is performing a contract (agreeing a time and a calendar booking) and legitimate interest (security, abuse prevention, counting our own links). Marketing and ad cookies rely on consent.

Retention Events are deleted about 30 days after the confirmed time. Sign-in codes expire in ten minutes. A session lasts at most 30 days. You can ask for your data to be deleted by email.

Processors Email is sent through Resend. The app and database run on the operator’s server. If you allow analytics or ads, Google may process measurement or ad data under its own terms.

Your rights You can access, correct and delete your data and object to processing. You can withdraw consent on the cookie page. In Finland the supervisory authority is the Office of the Data Protection Ombudsman.

Contact tuki@sopisiko.fi