Unne survey — Privacy notice

Unne is currently operated by the Unne project, based in Finland. We are responsible for the processing of personal data described in this Privacy Notice.

Contact: hi@unne.io

This notice applies to survey.unne.io and to the market research survey published on it.

The Unne platform at app.unne.io is covered by a separate privacy policy and separate terms of service. Neither applies to this site.

We create one record partway through the survey and complete it when you submit. If you leave before submitting, the record keeps the answers saved up to that point. It contains your answers, the language in which you answered, the survey you took, the questionnaire version, whether you completed it, and the time it was saved and submitted.

We store nothing else with a response. We do not ask for your name, email address or organisation, and we do not store your IP address, a cookie, a device identifier or any account reference alongside your answers.

Your answers are also saved in your browser as you work through the survey, so that they are not lost if the page is closed or the connection fails. That copy stays on the device you are using. It includes a random reference to your saved record, so that finishing the survey completes the same record rather than creating a new one. It is deleted when you submit, and in any case 14 days after you last worked on the survey. Saving it is necessary to provide the survey you have chosen to complete, so it needs no consent, and it is used for nothing else.

Responses contain no identifier. There is no field that could link a response to a person, an organisation, an email address or an Unne account.

This site does not read your Unne login session. Being signed in to Unne in the same browser makes no difference to what we store. We cannot tell whether any particular person responded, and we cannot find an individual response afterwards.

Several questions invite written answers. We do not ask for anything that identifies you, but a written answer may identify you — for example if it names your venue or describes a recognisable situation. For this reason we do not describe the survey as anonymous.

Please do not include names, contact details or information about other people in your written answers.

We use responses for market research, to understand what people need from a service like Unne and to guide how we develop it. Our legal basis is our legitimate interest in researching our own service under Article 6(1)(f) GDPR.

We use Google Analytics 4 to measure visits to this site, including how many surveys are opened and completed. It runs only if you accept analytics cookies in the banner on this site, which is your consent under Article 6(1)(a) GDPR. If you decline, Google Analytics operates in consent mode — it sends anonymous, cookieless measurement pings that do not store any data on your device.

We never send survey answers to Google Analytics.

With your consent, Google Analytics sets _ga, which expires after two years, and _gid, which expires after 24 hours.

One cookie is set whatever you choose. locale remembers whether the site is shown in English or Finnish. It is necessary for that, and holds nothing else.

Your cookie choice is stored separately for each site, so a choice you made on app.unne.io does not apply here and you may see the banner again.

Supabase (database) — stores the responses. Data is stored and processed in the EU (Ireland). Supabase Inc. is US-headquartered; Standard Contractual Clauses (SCCs) apply as an additional safeguard.

Vercel (hosting) — serves this site and processes your IP address and basic request data to deliver the page. Requests from EU visitors are processed at EU edge locations. Vercel Inc. is US-headquartered; SCCs apply, and Vercel is certified under the EU-U.S. Data Privacy Framework.

Google (analytics and spreadsheet) — Google Analytics processes visit data if you consent. Each submitted response is also copied into a private spreadsheet in our Google Workspace account, which only the Unne team can open; that copy holds the fields listed in section 3 and nothing more. Google may process this data in the US; SCCs apply.

We do not sell your data. We do not share it with advertisers. We do not use it for profiling or automated decision-making.

We keep responses indefinitely. They contain no identifier, and their value to us is in comparing them with later research.

Google Analytics data is kept for 14 months, the Google Analytics default.

Answers saved in your browser are deleted as described in section 3.

Under the General Data Protection Regulation you have the right to access, rectify, erase, restrict, object to and port your personal data.

Because responses contain no identifier, we cannot tell your response apart from anyone else's. Article 11 GDPR does not require us to collect extra information purely so that we could identify you. In practice this means we cannot confirm whether you responded, give you a copy of your response, or delete it on request.

If you would like a response removed and can describe it well enough for us to find it — for example an unusual phrase you remember writing, together with the approximate date — write to hi@unne.io and we will look. We cannot promise to find it.

You can change or withdraw your consent to cookies and analytics at any time through the cookie settings on this site.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the Office of the Data Protection Ombudsman (Finland): https://tietosuoja.fi

We protect your answers using standard measures, including encrypted connections (HTTPS/TLS), database rules that prevent responses from being read through the site, and access controls limiting who can reach our systems. Only the Unne team can see responses.

Answers saved in your browser are held on your own device and can be seen by anyone using it. If you are completing the survey on a shared or public computer, submit the survey before you leave.

This survey is not intended for anyone under the age of 18. We do not knowingly collect answers from minors.

We may update this notice to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates the most recent revision.

We do not collect contact details, so we cannot notify respondents of a change. The version published when you start the survey is the one that applies to your answers.