Privacy Policy

Controller

This service and the processing of personal data are the responsibility of Lutra Labs (sole trader, business ID 3641088-8).

For privacy matters and other enquiries: info@terassikeli.fi.

Overview

Terassikeli is a free service that requires no account. It is built to collect as little data as possible: it uses no cookies and no ads.

This policy explains what personal data the service processes, for what purpose, and with whom it is shared.

What data we process

The service may process the following data:

• Device identifier: a random identifier is stored in your browser to attribute votes, comments and price suggestions to your device and to prevent abuse. It contains neither your name nor your email.
• IP address: appears in the server and Cloudflare logs and is used for rate-limiting and abuse prevention.
• Feedback and error reports: the message you write and an optional email address, if you want a reply.
• Comment nickname: an optional name you may give with a comment. The nickname and comment are shown publicly in the service.
• Location: if you allow it in your browser, your location is used only to center the map. It is not stored and not sent to our server.
• Payment data: if you buy a beer, the payment is handled by Stripe. You enter your email and payment details directly with Stripe. We never see or store your card details or your email.
• Usage analytics: we use cookieless Umami analytics, which collects general usage data without identifying you and without tracking cookies.

Purpose and legal basis

• Running the service, rate-limiting and abuse prevention: legitimate interest.
• Replying to feedback: legitimate interest and the contact detail you voluntarily provide.
• Processing payments: performance of a contract (payment handled by Stripe).
• Usage analytics: legitimate interest in improving the service.

Cookies

Terassikeli sets no cookies. Only data needed for the service is stored in your browser: the device identifier, the nickname you choose, the last map location, and a one-time flag that the beer nudge has been shown.

If you open the beer payment window, Stripe may set its own cookies and use fraud-prevention fingerprinting as part of processing the payment.

Recipients and transfers

We do not sell personal data. We use the following service providers, which may process data on our behalf:

• Stripe – payment processing.
• Umami – cookieless usage analytics.
• Telegram – feedback messages are forwarded to the operator as a Telegram message (including any email you attach to the message).
• Cloudflare – content delivery and security (sees the IP address).

The server is hosted in the EU. Some providers (for example Stripe and Cloudflare) may process data outside the EU/EEA; such transfers rely on the European Commission Standard Contractual Clauses or an equivalent safeguard. In addition, your browser fetches data directly from the Open-Meteo weather service and the OpenFreeMap map service.

Retention

Votes, comments and price suggestions are kept as long as the related content is shown in the service. Feedback is kept for the time needed to handle it, and server logs only for a short period. Payment-related data is retained by Stripe under its own policies.

Your rights

You have the right to access data about you, to request its rectification or erasure, to restrict or object to processing, and to request data portability. Because the service does not collect your name or contact details without information you provide, please include e.g. your device identifier or the details of your comment with your request so we can identify it.

To exercise your rights, contact info@terassikeli.fi. If you believe your data is being processed unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

Changes to this policy

The service evolves, so this policy may be updated. We aim to note significant changes in the service.