Privacy policy.

▸Controller and contact

The data controller is Skadi Oy, a Helsinki software company. For any privacy question or to exercise the rights described below, write to hello@patchpond.app. This inbox is monitored and routed to the founder. There is no separately appointed Data Protection Officer; Skadi Oy is small enough that the founder handles privacy requests directly.

▸What we collect

TestFlight signup

When you submit the TestFlight enlist form on the home page, we collect: your email address, your device preference (iPhone, iPad, or either), the timestamp of the submission, the browser locale you sent (e.g. "en-US"), and the user-agent string and IP address attached to the request by Cloudflare. The form has a hidden honeypot field to filter bots; legitimate submissions leave it empty.

Site analytics

We use Glyphex, a cookie-less analytics provider modelled on Plausible. On each page load Glyphex receives: the page path and title, the referring URL (where you came from), your screen width, your browser's detected timezone, scroll depth, and time spent on the page. Your IP address reaches Glyphex's edge as part of the underlying HTTP request and is used to derive an approximate country / city — never a precise location — before being discarded. Any utm_* tracking parameters present in the URL are also passed through.

Glyphex does not set cookies and does not write anything to your browser's storage. The tracker only reads a single glyphex_ignore flag from localStorage so that user-level opt-outs can be honoured. We do not call Glyphex's identification, group, or user-properties APIs, so visits are not linked to a stable visitor ID.

To opt out site-wide, paste this once in your browser's developer console — Glyphex will skip the tracker on every page load until you remove the flag:

localStorage.setItem('glyphex_ignore', 'true')

Most browsers also honour the Global Privacy Control signal, and uBlock Origin, Ghostery, and similar privacy extensions block Glyphex by default.

The studio (/studio/)

The web studio runs entirely in your browser. Patches you save are stored in your browser's local storage; they are not transmitted to Skadi Oy or any third party unless you explicitly export and share them. The studio loads the same Glyphex analytics described above.

Edge and operational logs

Cloudflare records request metadata (IP address, user-agent, request path, response status) for every page and worker request as standard edge logging. These logs are used for security, abuse prevention, and uptime monitoring.

What we do not collect

There are no user accounts. No passwords are stored. The site does not set non-essential cookies of its own. We do not run ad networks or behavioural retargeting. We do not collect audio recorded in the studio.

▸Why we collect it, and the legal basis

TestFlight signup data is processed on the basis of your consent when you submit the form, and on our legitimate interest in operating the beta program (notifying you when a build is ready and tracking who has been invited). You can withdraw consent at any time by writing to hello@patchpond.app and asking for your entry to be deleted.

Site analytics through Glyphex are processed under our legitimate interest in understanding whether the site works, in the proportionate, low-individuation form described above. If you want to opt out of analytics, most browsers honour the Global Privacy Control signal, and uBlock Origin, Ghostery, and similar tools block Glyphex.

Operational edge logs are processed under our legitimate interest in keeping the service secure and available.

▸Sub-processors

The third parties that touch personal data on our behalf:

• Cloudflare — hosts the static site (Cloudflare Pages), runs the signup Worker, stores TestFlight signups in a Workers KV namespace, and provides edge delivery + logging. EU-region processing where available.
• Resend — transactional email provider. Each TestFlight signup triggers one notification email from hello@patchpond.app to the founder. Resend processes the body of that notification (including your email and platform preference) only long enough to deliver it.
• Glyphex — analytics. Receives the page-view signals described above.
• Apple — once you receive a TestFlight invitation, the beta itself is distributed through Apple's TestFlight program, which has its own privacy terms.

Where any of these providers process personal data outside the European Economic Area, the transfer is covered by Standard Contractual Clauses, the EU–US Data Privacy Framework where the provider is certified, or equivalent safeguards.

▸Retention

TestFlight signup entries are retained in Cloudflare Workers KV until the beta program closes. After that, entries are deleted within 90 days unless you have already accepted a TestFlight invitation, in which case Apple becomes the controller for the beta-tester relationship.

Cloudflare edge logs follow Cloudflare's standard retention (typically up to 30 days). Resend retains transactional email records for the period documented in their policy. Glyphex retention is documented in their privacy policy.

If you ask for your data to be deleted, we will purge your KV entry and delete the corresponding notification email from any of our internal mail folders within one calendar month, except where law requires us to keep specific records longer.

▸Your rights under GDPR

If GDPR applies to your data, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data, with narrow exceptions where law requires retention.
• Restriction — ask us to pause processing while a dispute or correction is resolved.
• Portability — receive the data you provided in a structured, machine-readable format.
• Objection — object to processing that relies on our legitimate interest, including direct marketing.

To exercise any of these, write to hello@patchpond.app. We will acknowledge your request promptly and respond within the GDPR statutory deadline (typically one month, extendable by two months for complex requests with notice).

If you believe our processing violates the law, you may also complain to your local supervisory authority. In Finland that is the Office of the Data Protection Ombudsman.

▸Changes to this policy

Material changes will be announced through the site and through a refreshed effective date below. The policy is versioned in our public repository alongside the rest of the codebase, so prior versions can be diffed if you want to compare.