Privacy
How we handle your data
Written to be read, not to be survived. If anything here is unclear or looks wrong, email us and we will fix it.
Last updated: 9 Oct 2026
Who is responsible
Vynna is the data controller for the personal data described on this page. Reach us at hej@vynna.se for anything to do with your data: questions, corrections, or deletion.
What we collect, and when
We collect as little as we can get away with. There is no account system, no profile and no tracking.
When you request an assessment
The contact form asks for your company, your name, your work email, your role, the type of Kubernetes environment, the number of clusters (optional), what you mainly want help with and a free-text message. This is sent to us as an email. The forms must not be used for kubeconfig files, Kubernetes exports, logs, scanner results or other infrastructure data.
Infrastructure data
Infrastructure data from a review engagement is covered by a separate agreement, an agreed data classification, retention period, access control and deletion process. A data processing agreement is entered into before any processing where the parties' roles and the planned processing require it.
When you simply visit the site
Our hosting provider processes the technical data any web server sees: IP address, browser type, the page requested and the time. This is used to serve the site and keep it available. We run no analytics and no advertising trackers, so nothing is collected to profile you.
What stays in your browser
Your language choice, your theme choice and any assessments you create are stored locally in your own browser. They are never transmitted to us. Clearing your site data deletes them permanently, including assessments. We cannot restore them, because we never had them.
Why we are allowed to process it
Steps taken at your request
When you ask for an assessment, we process your details to answer you and prepare a proposal. That is processing necessary for steps taken at your request before entering a contract (GDPR Article 6(1)(b)).
Legitimate interests
Keeping the site running, secure and free of abuse rests on our legitimate interest in operating the service (Article 6(1)(f)). We have weighed this against your interests and it involves no profiling.
Necessary local storage
Your language, theme and saved assessments are stored on your own device because the product cannot function without them. Nothing is stored for marketing, so no consent banner is required.
How long we keep things
- Assessment requests: deleted no later than 12 months after our last contact if no agreement has been entered into, and immediately if you ask.
- Infrastructure data: the website never receives any. What an assessment engagement retains, and for how long, will be stated here before the first engagement begins.
- Data in your browser: kept until you clear it. It is under your control, not ours.
Who else processes your data
These are the services the website currently uses. The list is kept up to date when services change.
Cloudflare
Hosting and edge network. Serves the site and processes standard server request data.
Resend
When you submit a form, Resend processes its contents to deliver it to Vynna. Resend is a US company.
Google Fonts
Serves the typefaces the site uses. It receives request metadata including your IP address. It never receives any infrastructure data or form contents.
Transfers outside the EU/EEA
When you visit the website, Cloudflare processes the technical request data needed to deliver and protect the service. When you submit a form, Resend processes its contents to deliver it to Vynna. The data may be processed outside the EU/EEA depending on the providers' current service and contractual arrangements. Applicable safeguards and provider terms are to be described accurately and kept up to date.
Your rights
Under the GDPR you have the following rights over your personal data. Exercising any of them is free, and we will answer within one month.
Access
Ask what personal data we hold about you and get a copy of it.
Rectification
Have anything inaccurate corrected, and anything incomplete completed.
Erasure
Ask us to delete your data. For an assessment request, this means deleting the email thread.
Restriction
Ask us to stop using your data while a dispute about it is resolved.
Objection
Object to processing we base on legitimate interests.
Portability
Receive the data you gave us in a structured, machine-readable format.
How to exercise them
Email hej@vynna.se and say what you want. You do not need a particular form of words, and you do not need to explain why.
If you are not satisfied
You can lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which supervises data protection in Sweden. Details are at imy.se. We would rather you told us first so we can put it right, but that is your choice, not a condition.
Cookies and local storage
We use no advertising, analytics or tracking cookies of any kind. The site stores three things, all strictly necessary for it to work, and all readable only by this site.
| Cookies and local storage | What we collect, and when |
|---|---|
vynna.locale | Remembers whether you are reading in Swedish or English. Also mirrored to a cookie so the server can render the correct language before the page loads. |
vynna.theme | Remembers your chosen theme, so the site does not flash the wrong colours on load. |
vynna.assessments.v1 | Holds assessments you have created. Stored only in your browser and never transmitted to us. |
Changes to this policy
If how we handle data changes, this page changes with it and the date above moves. We will not quietly widen what we do with your data and leave the wording as it was.
Questions
Anything at all about your data, or about this page: hej@vynna.se.