Privacy

Who is responsible

Amir Ghari, Helsinki, runs Mielenreitti and is the data controller. Privacy questions: tietosuoja@mielenreitti.fi

Your answers stay on your device

The questionnaire runs in your browser. Your answers, your results and the choices you make are kept in your browser’s storage on this device, and they are never sent to us or to anyone else. The button "Delete everything Mielenreitti has stored on this device" deletes them at once, and so does clearing this site’s data in your browser. We cannot see them, so we cannot delete them for you. What is kept:

• your answers and results, with the date, until you clear them
• the date of a reminder to ask how things went, six weeks later
• groups you have said you are interested in, for 90 days
• a questionnaire you have not finished, only until you close the tab

No analytics, no tracking, no cookies

We use no analytics, advertising or tracking tools, and the site sets no cookies. Pages load nothing from other companies’ servers: the fonts and everything else come from mielenreitti.fi. Links to other services take you to their sites, which have their own privacy policies.

When you visit

The site is hosted by Vercel Inc. Every request passes through Vercel, which sees technical details: your IP address, your browser, the page asked for and the time. They are used to deliver the site and protect it from attacks. The request logs we can see are kept for one hour. Vercel handles this data under its own privacy notice. The legal basis is legitimate interest (GDPR Article 6(1)(f)): a website cannot be delivered without it. Vercel's privacy notice

If you send feedback or a rating

The site sends only what you wrote (or the number you chose), the interface language and, for a rating, which screen it came from. No name, email address or answers, unless you type them in yourself. It is forwarded by email through Resend, Inc. to our inbox, hello@mielenreitti.fi, on Google Workspace; the site itself keeps no copy. Resend keeps the sent email for 30 days, and we delete feedback a year after it arrives. Please leave out anything that identifies you or someone else. There is no reply to feedback: if you want an answer, write to the privacy address above. The legal basis is your consent, given by choosing to send it (GDPR Article 6(1)(a)); you can ask us to delete it at any time.

Outside the EU

Vercel, Resend and Google are US companies, so this data is processed in the United States and other countries where they operate. These transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (GDPR Article 45): all three are participants on the official list at dataprivacyframework.gov.

Your rights

You can ask what we hold about you and get a copy, have it corrected or deleted, have its use restricted, object to processing based on legitimate interest, and withdraw consent at any time. We answer within a month of receiving your request. In practice we hold very little: your answers are only on your device, and the only thing that reaches us is feedback you choose to send.

You can also complain to the supervisory authority: the Data Protection Ombudsman