D8Zero

Privacy Policy

Last updated: March 30, 2026

This policy is a practical starting point for a small pilot product. It is not legal advice. Have it reviewed by qualified counsel before you rely on it for compliance.

Who we are

D8Zero ("we", "us") operates this progressive web app and related pilot events focused on Helsinki. Contact details may appear in the site footer or on the FAQ when provided.

Data we process

Depending on how you use the app, we may process:

  • Account and profile details you submit (for example display name, email, photos you upload).
  • Authentication identifiers from Firebase Auth when you sign in or join the waitlist.
  • Waitlist and event-related information stored in Firebase (Firestore) under our security rules.
  • Technical data such as device type, coarse location from IP, and usage metrics when analytics is enabled.

Why we use data

We use personal data to:

  • Provide accounts, waitlist signup, and in-product features.
  • Operate and secure the service, including fraud prevention and abuse detection.
  • Improve the product and understand aggregate usage when analytics is turned on.
  • Communicate about the pilot where you have agreed or the law allows.

Legal bases (EEA and UK users)

Where GDPR applies, we rely on appropriate bases such as contract (providing the service you asked for), legitimate interests (security and product improvement, balanced against your rights), and consent where required (for example certain marketing or non-essential cookies or analytics, if used).

Processors and sharing

We use service providers that process data on our instructions, including Google Firebase (authentication and database) and, when configured, hosting and media providers. We do not sell your personal data.

Retention

We keep data only as long as needed for the purposes above, including legal, accounting, and security requirements. You can ask us to delete certain account data where applicable law allows.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent where processing is consent-based. You may lodge a complaint with your local supervisory authority.

Cookies and local storage

We use technologies needed to run the app (for example auth session storage). If we add optional analytics or marketing tags, we will describe them here and, where required, ask for consent before loading them.

Changes

We may update this policy when our practices or the law change. We will post the new date at the top and, where appropriate, notify you in the product.