Privacy & cookies

Tommi Sundqvist is responsible for the personal data processed on this site. Questions about privacy, or about your own data, go to nakedgut@gmail.com. The site is built and maintained by Aalto Visuals, which processes data only on the author’s instructions.

This site sets no cookies for visitors, so there is no cookie banner — there is nothing to consent to. Two exceptions are worth naming:

• Site administration. When the author signs in to the site’s admin area, one first-party cookie keeps that session open. It is never set for ordinary visitors.
• Payments. Stripe’s checkout runs on Stripe’s own domain and sets its own cookies there, under Stripe’s privacy policy.

Visits are counted without cookies. For each visit the site stores the page path, the domain of the site you arrived from, the device type (phone, tablet or computer), how long the page was actively open, and an anonymous visitor hash.

That hash is calculated from the IP address, the browser’s user agent and a salt that changes every day. The IP address itself is never stored, and a hash from one day cannot be matched to the next. There are no profiles, no cross-site tracking and no advertising networks.

When direct sales are open, the payment is processed by Stripe. Card details are entered on Stripe’s page and never reach this site. This site stores the Stripe order id, the payment status, the amount and currency, the country Stripe reports, your email address, and how many times your download link was used.

Your email address is used to deliver the book and to help if something goes wrong with your order. It is not added to any mailing list and not used for marketing.

Buying on Amazon happens entirely on Amazon: that purchase is covered by Amazon’s own privacy policy, and this site receives no data about it.

If you ask for the free sample, your email address is added to the author’s own list. What is stored is the address, the date, where on the site you signed up, the wording of the consent you ticked, and whether you are still subscribed. Nothing else — no name, no tracking of what you open.

The list is used for the sample itself and for occasional updates about the book, the audiobook and what Tommi is working on. It is never sold, rented or shared, and it is not used for anyone else’s marketing.

You can leave at any time: every message carries an unsubscribe link, which identifies you by a random token rather than by your address, and writing to nakedgut@gmail.com works just as well. Unsubscribing marks the address as removed and it is no longer used.

If you write to nakedgut@gmail.com, your message and address are used to answer you, and for nothing else.

• Hosting: Vercel
• Database: Supabase, EU region (Stockholm)
• Payments: Stripe

Each of these processes data on the author’s behalf under its own data processing terms.

Order records are kept as long as accounting law requires. Anonymous visit statistics are kept for comparing trends over time; because the daily salt rotates, they cannot be traced back to an individual visitor after the day of the visit.

Under the GDPR you may ask for access to your data, correction of it, its erasure, restriction of its use, or object to its processing. In practice this concerns order and email data — the visit statistics contain nothing that identifies you. Write to nakedgut@gmail.com.

If you believe your data has been handled incorrectly, you can also contact the Finnish Data Protection Ombudsman (tietosuoja.fi).

The date at the top of the page shows when this statement was last changed. Material changes will be described here rather than made quietly.