Privacy Policy

Last updated: July 11, 2026

Who is responsible

This website is run by the operator of sauna-assistant.com (the data controller for the processing described here). For anything related to your personal data, contact privacy@sauna-assistant.com.

The Sauna Assistant app collects nothing

The iOS app requires no account and includes no analytics or tracking. Your session history, notes, settings, and maintenance records stay on your devices (and in your private iCloud, if you enable syncing). We never receive them and operate no server for them. The rest of this policy is about this website only.

What we process, why, and on what legal basis

  • Website analytics (Google Analytics). Anonymous-to-us usage data — pages visited, approximate location, device type. If you visit from the EU/EEA, the UK, or Switzerland, this runs only with your consent (GDPR art. 6(1)(a)), given or declined through the cookie banner; if you decline, Google Analytics is not loaded at all. Elsewhere, analytics is enabled by default (legitimate interest in understanding site usage) and you can turn it off at any time via cookie settings.
  • Campaign attribution. On the same consent basis as analytics, the browser remembers which campaign or link brought you to the site (stored on your device for up to 30 days) so we can tell which advertising works. It contains no name, email, or identifier — only e.g. "google / summer-campaign". Opting out also erases a previously stored value.
  • Email addresses. When you join a waitlist, subscribe, or request a download, we store your email address and use it solely to provide what you asked for (art. 6(1)(b), performance of your request). Every newsletter email contains an unsubscribe link.
  • Security. A technical CSRF cookie protects forms against abuse, and download forms use Google reCAPTCHA to block bots (art. 6(1)(f), legitimate interest in keeping the site working).

Cookies and similar storage

  • _iris_csrf — form security. Strictly necessary; expires after 12 hours.
  • sa_consent — remembers your cookie choice. Strictly necessary.
  • sa_attribution — campaign that brought you here. Only with consent; expires after 30 days.
  • _ga and related Google Analytics cookies — usage statistics. Only with consent.

You can change your mind at any time — it is as easy to withdraw your consent as it was to give it: open cookie settings.

Who receives data

The website is hosted on servers in the EU/EEA. Beyond hosting, we use a small number of service providers: Google (Analytics and reCAPTCHA), an email delivery provider for sending you requested emails, and an internal notification service that alerts the site operator about new requests. We do not sell personal data or share it for advertising.

International transfers

Google and our notification service are US companies certified under the EU–US Data Privacy Framework; where the framework does not apply, transfers rely on the European Commission's Standard Contractual Clauses.

How long we keep data

  • Analytics data: up to 14 months (Google Analytics retention setting).
  • Newsletter subscriptions: until you unsubscribe.
  • Waitlist and download-request emails: until the request is fulfilled and the related campaign or waitlist is closed.

Your rights

Under the GDPR you can ask for access to, correction of, or deletion of your personal data; ask us to restrict processing or hand your data over in a portable format; object to processing based on legitimate interest; and withdraw your consent at any time without affecting past processing. Email privacy@sauna-assistant.com and we will respond within a month. You also have the right to complain to a supervisory authority — in Lithuania, the State Data Protection Inspectorate (vdai.lrv.lt), or the authority in your own country.

Changes

If this policy changes materially, the "Last updated" date above changes with it.