Privacy

SPINUNIT Lab Oy (business ID 2916199-1), Mechelininkatu 23, 00100 Helsinki, Finland. info@coplanai.com

Write to this address for anything on this page.

We count visits with a small script of our own, to see which pages are read and where readers come from. It sets no cookies and does not store your IP address.

For each page view we store:

• the page address (without anything after a “?”) and whether the page was found
• the site that linked to the page, if any
• campaign tags in the address (utm_source, utm_medium, utm_campaign)
• country, region and city, as estimated by our host from the connection
• the kind of device, browser and operating system
• screen width and browser language
• how long the page was open (up to 30 minutes) and how far it was scrolled
• which file you downloaded or which outside link you followed (its address only)

To count visitors within a day, the script makes a code from the date, the site, your IP address and your browser’s description, using a secret key. The code changes every day, so we cannot tell that two visits on different days were the same person. The IP address and the browser description are not stored.

Automated traffic (search robots, test browsers) is not counted. The statistics are stored by Cloudflare in the European Union and deleted after 25 months.

To opt out, add #notrack to the address of any page, for example https://coplanai.com/#notrack. Your browser then remembers not to send statistics to this site. Add #track to undo it.

Cloudflare, Inc. hosts this site. To deliver pages and protect them from attacks, Cloudflare processes your IP address and the details of each request, and keeps request logs for a short time. Cloudflare acts on our behalf and is certified under the EU–U.S. Data Privacy Framework.

The pages of coplanai.com load their fonts, scripts and images from this site. The one exception is the videos on some use-case pages: a video loads from YouTube only when you press play, and from then on Google receives your IP address and the details of your browser.

Some working pages we publish under /dashboard/, such as maps and presentations, load map tiles, fonts or code libraries from other services, for example OpenStreetMap or jsDelivr. Those services receive your IP address when such a page loads.

• Password-protected pages. After you enter a page’s password, a cookie (cpw_…) keeps you signed in to that page for 30 days. It holds proof of the password, not who you are.
• Opt-out. If you used #notrack, your browser keeps that choice (_notrack).

We sometimes give clients a link to download a file from files.coplanai.com. The file is stored in the European Union until we delete it, and the link stops working when it expires. We do not record who downloads it; Cloudflare’s short-term request logs apply.

We invite the people who ran a session with us to describe it for our public library of use cases, through a private link we send them by email. The link opens a page at coplanai.com/stories; search engines are told not to index it, and it works until it expires or we stop it.

On that page we keep what you write and choose, part by part as you type: your answers about each session, the photos you upload with their credits and captions, and, if you give them, your name, role, organisation and email address. We also note when the link was opened and when a card was saved, sent or approved. Photos are made smaller in your browser, which removes their location and camera data, and we remove such data again when they arrive. The page stores nothing in your browser.

Your answers and photos are stored by Cloudflare in the European Union. When you send a card, we copy it into our project archive, which only the CoPlanAI team can read.

Nothing is published until you have seen the page made from your answers and told us to publish it. The page shows your answers, the photos chosen with you and their credits, and only the contact details you chose to show; your email address appears only if you chose that.

We keep your story while the use case is in our library and our project archive. You can ask us at any time to change or remove your story, your photos or your contact details: write to the address above. A removed story is deleted from the stories page, and its page leaves this website at our next update.

Why this is allowed: you agree to publication when you send your answers (GDPR Article 6(1)(a)), and you can withdraw that agreement at any time; keeping the record of our project work is our legitimate interest (Article 6(1)(f)).

Some session pages have a “Write to them” button. What you send there (your name, email address, organisation and message) is stored by Cloudflare in the European Union until we fetch it; then its words and your address are deleted there, and we pass your message on by email to the person you wrote to, so they can answer you directly. We keep it in our project archive as long as the exchange is useful.

To limit unwanted messages, the page counts messages per day with a code made from the date, your IP address and a secret key. The code cannot be turned back into your IP address, and it is deleted after 30 days. Your IP address is not stored.

We use your email to answer you and keep it as long as the exchange is useful for our work.

• Statistics, hosting and security: our legitimate interest in running the site safely and knowing what is read (GDPR Article 6(1)(f)).
• Password cookies: they are needed to show the page you asked to open.
• Email: our legitimate interest in answering you, or the steps you asked for before an agreement.

We do not sell data, show advertising or build profiles of visitors.

You can ask to see, correct or delete data about you, to restrict its use, or object to it. Because the visitor code changes daily and no IP address is kept, we usually cannot find statistics that belong to one person; write to us and we will check what we hold.

You can also complain to the data protection authority: Office of the Data Protection Ombudsman, Finland.