Privacy Policy — acoid.com
Effective date: 2026-08-14 Data controller: Acoid HB, Hallebergsvägen 15, 167 37 Bromma, Stockholm, Sweden. Organisation number: 969803-5855. Contact: hello@acoid.com.
This policy explains what personal data we process when you visit acoid.com, why, the legal basis, how long we keep it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).
This site is a marketing site. It has no accounts, no payments, and no database. Almost the only personal data it handles is what you type into the contact form.
We do not sell your data, do not use it for advertising, and do not track you across other sites.
1. What this policy covers
This policy covers the website at acoid.com and its subdomains.
It does not cover the Skifty mobile app, which processes far more data and has its own policy — see the Skifty Privacy Policy.
2. The contact form
When you send us a message, we process what you type:
| Data | Required | Why | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Your name | No | So we know who we are replying to | Legitimate interests (Art. 6(1)(f)) — responding to a business enquiry |
| Your email address | Yes | So we can reply. It becomes the reply-to address on the email | Legitimate interests |
| Company | No | Context for the enquiry | Legitimate interests |
| Your message | Yes | The enquiry itself | Legitimate interests |
| Your IP address | — | Transiently, as a counter to rate-limit the form against spam | Legitimate interests — keeping the form usable |
The message is delivered to us by email, as plain text only. It is not stored in a database, because we do not run one for this site. It lives in our mailbox like any other email.
The IP address is held in memory only, as a short-lived counter, and is never written to storage.
Please do not send sensitive personal data through this form. It is a business enquiry form, and there is no need for it.
3. Analytics
We use Vercel Web Analytics to see which pages are read. It is cookieless and does not follow you to other websites. Visitors are identified by a hash derived from the request, which is discarded after 24 hours.
For each page view it may record: the time, the URL and route, the referring site, filtered query parameters, an approximate location derived from your IP (country, region, city), your device type, operating system and browser.
Legal basis: legitimate interests (Art. 6(1)(f)) — understanding whether the site is useful. The data is aggregated and is not used to identify anyone.
4. Hosting and server logs
The site is hosted by Vercel. As part of serving pages, Vercel processes technical request data including your IP address. Legal basis: legitimate interests — operating and securing the site.
5. Cookies
This site sets no cookies and uses no local storage. There is nothing to consent to, which is why you are not shown a cookie banner.
Fonts are served from our own domain rather than a third-party font service, so loading a page does not disclose your visit to anyone else.
6. Who else sees your data
We use two processors. Both are established in the United States, and both are certified under the EU-US Data Privacy Framework and offer Standard Contractual Clauses for transfers out of the EEA.
| Processor | What they handle |
|---|---|
| Resend | Delivering the contact form email to us |
| Vercel | Hosting the site, and Web Analytics |
We do not share your data with anyone else, and we do not sell it. We may disclose data if the law requires it.
7. How long we keep things
| Data | Retention |
|---|---|
| Contact form enquiries | 12 months from your message, then deleted, unless it becomes part of an ongoing client relationship — in which case it is kept for that relationship |
| Rate-limit counters | Minutes. Held in memory and lost whenever the server restarts |
| Analytics | Aggregated. The visitor hash is discarded after 24 hours |
8. Your rights
Under the GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. Where processing relies on legitimate interests, you have the right to object at any time.
Email hello@acoid.com and we will respond within one month.
You also have the right to complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY) — imy.se — or to the authority in your country of residence.
9. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
10. Changes
If we change how the site handles personal data, we will update this policy and change the effective date above.