Privacy

Trasigt is built to know as little about people as possible. This page describes what we store, why, and for how long. The data controller is Prodify Group AB, Stockholm (nils.hulth@prodify.se).

If you report a problem (visitor)

• Reporting is anonymous by design: no login, no email, no required name. We store the text you write, the photo you optionally attach, and when it was sent — nothing that identifies you.
• You can optionally sign a report with a name of your choosing. It is never verified, is shown only to the room's organization (never on the public page), and is deleted together with the report. Contact the operator to have it removed earlier.
• Don't include personal data in the text or photo; the room's organization sees what you submit.
• To limit spam we count recent requests in memory only, keyed by a one-way fingerprint of your network — never your address itself, which is never written to disk. The counts fall out of memory within minutes and whenever the service restarts.
• The public reporting pages set no cookies and use no analytics or tracking.

If you have an account (member)

• We store your name, email address, a hash of your password, your role, and your notification preference — the minimum needed to run your organization's dashboard.
• We use one strictly necessary session cookie to keep you signed in. There are no marketing or analytics cookies, which is why there is no cookie banner.
• We email you when a new issue is reported (you can turn this off in Settings) and for account actions like verification and password reset. Email is delivered through our processor Resend.
• Your data is deleted when your membership or organization is deleted. Contact the operator to exercise your GDPR rights: access, correction, deletion, portability.

Where data lives

All data is stored on servers operated for Prodify Group AB within the EU (Hetzner, Germany/Finland).