Privacy & cookies

Anonymous request totals

Our server counts requests for the landing page, including when you decline the optional choices. It stores only a daily total (UTC) for fixed source categories, such as Skeppat, GitHub, Google or other. These totals contain no visitor identifiers, IP addresses, full referral URLs or browsing histories. They include repeat requests and automated traffic, so they do not represent unique people.

This counting uses the page request already needed to serve the website and adds no cookies, browser storage or tracking scripts. We use the totals to understand overall traffic sources. They are stored in Cloudflare D1 in the EU and removed after one year as new requests arrive.

What the website measures

With your consent, PostHog processes the options you choose:

• Website analytics: page visits and departures, referral domains and campaign tags such as ref=skeppat, clicks on Download for Mac, and successful copies of the install command. A download click tells us that a link was pressed, not that the app was installed.
• Error reports: website error messages, the code locations involved, and technical browser details that help us investigate failures.
• Session recordings: a reconstruction of the page layout, scrolling, pointer movements, clicks and navigation, so we can see where using the website is confusing. Recording begins after you agree and stops when you withdraw this choice.

These events include timestamps, page paths, browser and operating-system details, screen dimensions, and random browser/session identifiers. Those identifiers can link events during your visit and are treated as personal data.

We strip query strings and fragments from page URLs, keeping only the selected campaign tags for analytics. Error reports are filtered to remove recognisable email addresses and URL parameters. Error text can still contain information produced by the website.

Recordings show the website's public text and layout. Input values, text marked as private and descriptive element attributes are masked in your browser before sending. Recognisable email addresses and URL parameters are filtered from recorded text. Embedded frames, editable areas, video and canvas contents are blocked. Console logs and network request bodies and headers are not recorded. We do not read clipboard contents or identify you by name or email. It measures this website only, not your local projects or use of the spool app.

Cookies and browser storage

Optional measurement starts only after you allow it. We use browser storage rather than analytics cookies. The same consent choices apply.

The preference record is used to respect your choice. Optional storage requires your consent. If your browser prevents saving preferences, your choice applies to the current page and you may be asked again later.

Providers and retention

PostHog, Inc. processes the optional measurement data for us. We use PostHog Cloud EU, hosted in Frankfurt, Germany. Analytics and error events are kept for up to one year under the Free plan’s retention period. Session recordings have a separate retention period of up to 30 days, followed by deletion processing. We use this history to compare traffic sources and investigate website problems.

Your IP address reaches PostHog as part of the network connection. Our event configuration disables IP storage and location enrichment. EU hosting does not mean every provider operation occurs in the EU: international processing is subject to the safeguards described in PostHog’s data-processing agreement and subprocessor list.

Cloudflare delivers and protects this website. It processes connection data such as IP addresses, requested URLs and browser information to serve requests and protect against abuse. This is separate from optional analytics and is based on our legitimate interest in operating a reliable, secure website. Cloudflare’s processing locations, retention criteria and transfer safeguards are described in its privacy policy.

If you email us, we use your email address and message to respond and handle your request, based on our legitimate interest in answering enquiries and, where applicable, our legal obligations. We keep that correspondence while needed to resolve the request and meet those obligations.

Your rights

You can withdraw consent using the controls at the top of this page. Withdrawal stops future optional collection; it does not undo earlier lawful processing or automatically delete data already received.

You can ask to access, correct or delete your personal data, restrict its use, receive a portable copy where applicable, or object to processing based on legitimate interests. Email privacy@spool.page. Because we do not link website identifiers to email addresses, we may need information to locate the relevant records.

You may also complain to IMY, the Swedish Authority for Privacy Protection, or your local data-protection authority. We do not use these events for decisions that have legal or similarly significant effects on you.