Privacy policy
Last updated: 14 November 2026
Tiny Tomte is a small project. This page explains what we collect when you join the waitlist or send us a business request, why we need it, and what you can do about it. We collect as little as we can.
Who is responsible
Tiny Tomte is developed by Linka Craft s.r.o., a company registered in the Czech Republic. It is responsible for your data (the “controller” under the EU GDPR and the UK GDPR). You can reach us at ivan@linkacraft.com.
What we collect
When you join the waitlist we store:
- your email address;
- the language of the page you signed up on and the main language your browser asks websites for (such as “de”), so we know which languages to add next;
- if you answer the optional question after signing up, what you'd use it for, including anything you write in your own words;
- how you found us: the campaign tags in the link you followed (such as utm_source) and the page you came from;
- your approximate country, which our hosting provider works out from your IP address. We don't store the IP address itself;
- when you agreed to receive emails and which version of this text you saw;
- a one-way hash of your IP address, used only to block spam sign-ups. We erase it after 30 days.
Business requests
When you send a request on the business page we store:
- your work email and the company name;
- how many screens you need, where they will be used and anything you wrote in the message;
- the language of the page, the campaign tags in the link you followed and the page you came from;
- your approximate country, which our hosting provider works out from your IP address. We don't store the IP address itself;
- when you agreed to be contacted and which version of this text you saw.
We use it only to reply to your request and prepare an offer. Legal basis: steps you asked us to take before a possible contract (GDPR Art. 6(1)(b)) and your consent (Art. 6(1)(a)). To protect the form from spam, we keep a one-way hash of your IP address for at most a day.
We keep a request while we're talking and for up to two years after our last message, unless you ask us to delete it sooner.
Widgets that read other services
- Calendar. You give us the private iCal link of your Google Calendar, iCloud or Outlook calendar. Anyone who has this link can read that calendar, so we treat it as a secret: we store it encrypted, never show it to you again, keep it out of our logs and web addresses, and delete it when you remove the widget, remove the display from your account or delete your account. Our server uses the link to fetch the calendar about every 15 minutes and draws today's and tomorrow's events on your display. We don't keep a copy of your calendar: the events stay in our server's memory for at most a day (so the display can show the last known events if your calendar doesn't respond), and the picture of the screen for a few hours. We use them for nothing else. Legal basis: providing the service you asked for (GDPR Art. 6(1)(b)).
- Subscribers. This widget uses YouTube API Services to show the public subscriber count of the channel you choose. We send Google only the channel name, nothing about you. We refresh the number at most every 15 minutes and keep it for at most a day. By using this widget you agree to the YouTube Terms of Service (youtube.com/t/terms); Google's Privacy Policy is at policies.google.com/privacy.
Why we use it
- To email you about Tiny Tomte: the launch, early access, pre-orders and occasional product news. Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time.
- To see which videos and links bring people here, so we can make better ones. Legal basis: our legitimate interest (Art. 6(1)(f)). We look at totals, not at individuals.
- To decide which widgets to build first, from your answer to the optional question. Legal basis: our legitimate interest (Art. 6(1)(f)). We look at totals, not at individuals.
- To protect the form from spam and abuse. Legal basis: our legitimate interest (Art. 6(1)(f)).
We never sell your data and never share it for advertising.
Confirming your address
We will send you one email asking you to confirm your address. We send news only to confirmed addresses. If you don't confirm, we don't email you again.
Who processes the data for us
- Vercel Inc. (USA) hosts this website on servers in Frankfurt, Germany, and provides cookie-free visitor statistics.
- Neon (USA) hosts our database on servers in Frankfurt, Germany.
- When we start sending emails, we'll add our email provider to this list before the first email goes out.
The server that receives the form and our database are both in the EU (Frankfurt, Germany). Vercel and Neon are US companies, so they may access the data from outside the EU. Such transfers are protected by the European Commission's Standard Contractual Clauses with the UK Addendum and, where the provider is certified, by the EU–US Data Privacy Framework.
Cookies and statistics
This site doesn't use cookies for tracking or advertising. We count visits with Vercel Web Analytics, which works without cookies and doesn't identify you.
We also keep simple daily totals of what people do on the site: which widgets they open in the simulator, which buttons they press, how many join the waitlist and whether they came from an AI assistant such as ChatGPT. These are just numbers per day, with no cookies and nothing that could identify you.
How long we keep it
Until you unsubscribe or ask us to delete your data. When you unsubscribe, we keep only your address and the date, so we never write to you again, unless you ask us to delete it completely. If the project stops, we delete the list.
Your rights
You can ask us to show you your data, correct it, export it or delete it, object to how we use it, or withdraw your consent. Just write to ivan@linkacraft.com. Every email we send has an unsubscribe link. We reply within one month.
You can also complain to a data protection authority: in the EU, to the authority in your country (ours is the Czech Office for Personal Data Protection, uoou.gov.cz); in the UK, to the Information Commissioner's Office (ico.org.uk).
Children
The waitlist is not meant for children under 16.
Changes
If we change this policy, we'll update the date at the top. If the change matters for you, we'll email the waitlist.