Privacy Policy
Last updated July 2026
This policy explains what personal data sleeken collects when you use this website or contact us, why we collect it, and the rights you have over it.
Who we are
sleeken is the Shopify studio of Saar, a software house based in Stockholm, Sweden. For the data described here, sleeken is the data controller. You can reach us any time at hello@sleeken.se.
What we collect
- Information you send us. When you submit the quote, contact, or free speed-audit form, we collect the details you provide — typically your name, email address, company or store name, store URL, and your message.
- Your theme preference. We store whether you prefer light or dark mode in your browser's local storage. It never leaves your device and is not a tracking cookie.
- Basic technical data. Like any website, our hosting provider may process standard request data (such as your IP address) to serve pages securely. We do not run advertising trackers, and we never sell or share data for advertising.
- Anonymous usage statistics. We measure how the site is used so we can improve it — which pages are read, roughly how long a visit lasts, which site referred you, whether a form worked, and how quickly pages loaded. This is deliberately anonymous: we store no cookie and no lasting identifier, so we cannot recognise you on a later visit or build any profile of you. We do not store your IP address or your full browser identification string — only a coarse label such as “mobile · Safari · iOS”, and only the domain that referred you, never the full address of the page you came from.
- Error reports. If something breaks while you are on the site, your browser sends us the error message, the technical stack trace, and the page it happened on, so we can fix it. These carry the same coarse browser label and no personal data.
- Abuse prevention on the free tools. The Speed Score tool calls a paid Google service on your behalf, so we count requests to stop it being drained. To do that without keeping your IP address, we turn it into a scrambled one-way code using a secret only our server knows — the code can't be turned back into your address, is only ever compared against itself, and is deleted within a day. It is used for nothing else.
Why we use it, and our legal basis
We use the details you submit solely to respond to your enquiry, prepare a quote or speed audit, and follow up about the work you asked about. Under the GDPR our legal basis is taking steps at your request before entering a contract, and our legitimate interest in responding to people who contact us. We do not use your data for automated decision-making or profiling.
For the anonymous usage statistics and error reports, our legal basis is legitimate interest: understanding whether the site works and fixing it when it doesn't. Because that measurement sets no cookie, keeps no lasting identifier, and cannot be linked to you or to any other site, it stays within what the ePrivacy Directive allows without asking for consent first. If we ever wanted to measure more than that, we would ask you before doing so.
Who processes it for us
We only share your data with the service providers that help us run the site:
- Supabase — stores form submissions, anonymous usage statistics and error reports in a database hosted in the EU.
- Vercel — hosts and delivers this website, and provides its own cookieless visitor and page-speed measurement. It sets no cookie and builds no cross-site profile.
Our fonts are self-hosted on our own domain, so loading this site sends no data to Google or any other third party. We never sell your personal data or share it for advertising.
Cookies and local storage
We don't use tracking or advertising cookies. The only things this site keeps in your browser are strictly necessary or functional:
- Theme preference — remembers whether you chose light or dark mode. Stored in local storage on your device; contains no personal data.
- Cookie notice — remembers that you've seen the cookie notice so it isn't shown again. Stored in local storage.
- Admin session — if an administrator signs in to the private admin area, a session token keeps them logged in. This never applies to ordinary visitors.
- Visit token — a random number that lets us count one visit as one visit rather than as five separate page loads. It is kept in session storage, which means your browser discards it the moment you close the tab. It is not a cookie, it contains nothing about you, and it is never reused across visits — so it cannot be used to recognise or follow you.
Because these are essential or functional and set no third-party or tracking cookies, they don't require consent under EU rules — but you can clear them any time from your browser settings.
We also honour the Global Privacy Control signal: if your browser or extension sends it, we record no usage statistics for your visit at all.
How long we keep it
We keep submissions for as long as needed to handle your enquiry and for our own business records, and we delete them when they are no longer needed or when you ask us to. Anonymous usage statistics are deleted automatically after 180 days, and error reports after 90 days.
Your rights
Under the GDPR you can ask us to access, correct, delete, restrict, or port your personal data, and you can object to our use of it. To exercise any of these, email hello@sleeken.se and we will respond within a reasonable time. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Changes to this policy
We may update this policy as our practices evolve. When we do, we will revise the date at the top of this page.
Contact
Questions about your data or this policy? Email hello@sleeken.se.