Privacy policy

Who is responsible

Sidlyft, Stockholm, is responsible for the personal data handled here. Send questions to [email protected].

No measuring and no tracking

The website has no visitor statistics and no analytics tools: no Google Analytics, no Facebook pixel, no ad scripts and no embedded services that follow you on to other sites. I don't know which pages you looked at or how long you stayed.

The fonts are loaded from Bunny Fonts, a European service that says it doesn't store visitors' IP addresses. The website never calls Google.

What is stored in your browser

Nothing. The website sets no cookies and stores nothing else in your browser either. That's why there's no cookie banner to click away.

When you get in touch

If you get in touch, through the form on the contact page or by email, I receive what you write: your name and email address, and if you fill them in, your business, phone number and the address of your website. The details are used to reply to you and, if it becomes a job, to carry it out. The legal basis is legitimate interest and, for a job, being able to fulfil the contract.

The form is sent using a service called Web3Forms, which receives the message, forwards it to my email and keeps a copy on its own servers. The service loads no script on the page – nothing is sent until you press Send. The website itself is made of ready-made files with no database, so nothing you write is stored there. If you would rather your message didn't go through Web3Forms, emailing me directly works just as well – the address is on the contact page.

My email runs on Google Workspace, so what you email, or send with the form, is handled by Google on my behalf.

Enquiries that don't lead to a job are deleted after one year. If it becomes a job, the correspondence is kept for as long as we work together, and after that for as long as Swedish bookkeeping law requires.

The web host

The website is hosted by Cloudflare, which like every web server records IP addresses, times and which file was fetched in technical logs. This is needed to serve the page and stop attacks. I don't use the logs to follow visitors, and they are not linked to anything else.

Data outside the EU

Cloudflare, Google and Web3Forms may process data outside the EU/EEA. Such transfers rely on the European Commission’s standard contractual clauses or the Data Privacy Framework, the EU’s decision on the level of protection in the United States.

When I contact a business

I sometimes contact businesses whose website I think I can improve. I then use contact details the business has published itself, for example on its website. The legal basis is legitimate interest. If you don't want to be contacted again, just reply no and I'll delete the details.

Your rights

You have the right to know what details I hold about you, to have them corrected or deleted, and to object to their use. Email [email protected] and I'll reply as soon as I can. If you think something is handled wrongly, you can contact the Swedish Authority for Privacy Protection, imy.se.

Changes

If anything changes in how personal data is handled, this page is updated. Last updated September 2026.