Privacy

Oskar Varis, operating under the name Ronski, Finland. Contact: privacy@ronski-app.com

Ronski is currently operated by Oskar Varis as a private individual, pending the founding of a company. Once a company has been established and takes over responsibility for this processing, we will update this notice and let you know.

This is what we store when you join the waitlist.

• Your email address, and the language of the page you used (English, Finnish or Swedish).
• A record of your consent: the wording you agreed to, that you confirmed you are 18 or older, the version of this notice, and the time.
• Confirmation emails: how many we sent to the address and when.

Pseudonymised abuse-prevention hashes. These hashes cannot be turned back into your address without our secret key. This is what is kept:

• a keyed hash of a coarse network prefix (not your IP address) for about 25 hours;
• keyed hashes of your address and of the mailbox behind it for 30 days, also after you unsubscribe or if the address was never confirmed, to stop mail bombing;
• a keyed hash of the mailbox for 365 days if you press "This was not me" in a confirmation email, so that it is never mailed again.

We use your email address to send you a confirmation email and, later, an invitation when Ronski opens.

• The emails come from Ronski <hello@ronski.app> and are written in English, Finnish or Swedish, depending on the language of the form you used.
• We send at most 2 confirmation emails to an address in 30 days, and never more than one in 24 hours.

The legal basis:

• Consent: the basis is your consent (GDPR Art. 6(1)(a)).
• Explicit consent: joining a waitlist for a dating app for gay, bi, trans and queer men can reveal your sexual orientation, which is special category data, so the required sign-up checkbox asks for your explicit consent to this (Art. 9(2)(a)).
• Legitimate interest: the abuse-prevention hashes rest on our legitimate interest in keeping the list safe (Art. 6(1)(f)).

Giving your email is voluntary, but without it we cannot put you on the list.

You are on the list only after you click the link in the confirmation email.

How long we keep it:

• Unconfirmed addresses: deleted after 7 days.
• A confirmed address without a newsletter consent: kept until 30 days after launch, or until you leave the waitlist, and at most 400 days after you confirmed. The 400 day limit and the deletion at launch apply to waitlist-only rows.
• An address with a newsletter consent: stays until you stop the newsletter or leave the waitlist.
• Abuse-prevention hashes: about 25 hours for the network prefix, 30 days for address hashes, 365 days after "This was not me".

Leave the waitlist with the link in any email we send (or stop only the newsletter with its own link). Leaving deletes your row from the live list at once and from backups within 30 days.

If you tick the newsletter box, we also use your email address and language to send you occasional news about Ronski, at most twice a month.

The basis is your consent (GDPR Art. 6(1)(a)), given separately from joining the waitlist.

• Already on the waitlist? If you are already on the waitlist, you can tick the newsletter box on the form again; we then send you one email asking you to confirm, and the newsletter starts only when you press the button in it.
• Stopping it: our confirmation email says plainly that you asked for news and carries a Stop newsletter link, and every newsletter has one too. Stop newsletter stops the newsletter at once and does not remove you from the waitlist; Leave waitlist removes your row, including the newsletter.
• When you stop the newsletter we keep a keyed hash of your address id (no email) and the time for 30 days, only so that a restore of an older backup cannot undo the stop.
• Tracking: we do not track whether you open our emails or click links.
• After launch: newsletter subscribers are kept after the waitlist is deleted at launch, until they stop the newsletter or leave the waitlist.
• We also store the version of the newsletter text you ticked and the time.

We do not sell or share your address, and this website uses no analytics or ad trackers and sets no cookies of its own.

• Storage: the list is stored with Cloudflare (hosting and database, in its EU jurisdiction), which acts as our processor.
• Email: the confirmation email is sent through Cloudflare Email Sending, also only our processor.
• Bot check: the waitlist form loads Cloudflare Turnstile (a script from challenges.cloudflare.com, only when you click into the email field) to block bots; Turnstile sees your browser signals and IP address, and Cloudflare may set a security cookie for that purpose.
• Fonts are hosted on our own server.

Transfer to the US. Cloudflare is a US company. Your data is stored in the EU, but Cloudflare may be able to access it from the US. The safeguards are the EU-US Data Privacy Framework and the Standard Contractual Clauses in Cloudflare's data processing agreement.

You can ask for a copy by writing to privacy@ronski-app.com.

The quickest way to leave is the Leave waitlist link in any email from us: it deletes your address from the live list at once.

• Access to your data and a copy, correction, erasure or restriction: write to privacy@ronski-app.com.
• Withdraw your consent at any time, without giving a reason. It does not affect what happened before.
• Object to our use of the abuse-prevention hashes, which rests on our legitimate interest (GDPR Art. 21). Write to privacy@ronski-app.com. We will then stop unless we have compelling legitimate grounds, such as stopping ongoing abuse.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

They run only in your browser. Nothing you enter there is sent or saved, and it is gone when you close or reload the page.