What we collect
As little as possible. We do not ask for your name, personal identity number, case number or anything else about your situation. We do not want that information and have no reason to store it.
- No advertising or tracking cookies, and no profiling
- Visitor statistics are collected in aggregate — which pages are read, not who reads them
Our web server logs technical details of requests, as every web server does. Such logs are needed for operation and security, are kept briefly, and are not used to follow individual readers.
The email address for the practice test
There is one exception to the paragraph above, and it is the practice test. There we ask for your email address before the test starts. It is the only place on the site where we ask for anything about you, and it is optional — every other page, including everything you need to know about the test, can be read without giving us anything.
- What we store: the email address, which language you were using the site in, the time, and a coded value standing in for your IP address. We do not store the IP address itself, and we store no test answers — what you answered stays in your browser.
- When: only once you have entered the six-digit code we email you. Before that all we hold is a coded value standing in for the address, next to the code, and both are gone within ten minutes.
- Why: so we can get in touch about the citizenship test and about the app once it is released.
- Legal basis: your consent. You give it by ticking the box, and you can withdraw it at any time.
- Sharing: to send the code, the address goes to Resend, the service that delivers the email. Once you have confirmed the address, it also goes to Driploop, the service we use for the emails we send later. We also tell Driploop which language you were using the site in, that you have started and finished the practice test, and how many of the questions you got right — never what you answered to any single question. The score is used only to decide what we write to you about the test. Both process the data solely on our instructions. Beyond that the address is not disclosed and not sold to anyone else. It sits in our own database on the server running this site.
- Retention: until you ask us to delete it, or until we stop sending anything.
The code is what keeps the list to mailboxes someone can actually read. We store it hashed, never in plain text, and it is deleted the moment it is used or when it expires. If you want to be removed, just get in touch through the contact page — we do not need a reason and will delete the record.
Your rights under the GDPR
The General Data Protection Regulation, the GDPR, gives you rights against us. You do not have to justify why you are using them, and it costs nothing.
- The right to know what data about you we process, and to get a copy of it
- The right to have inaccurate data corrected
- The right to have data erased
- The right to object to the processing and to request that it be restricted
- The right to complain to the Swedish Authority for Privacy Protection, IMY, if you believe we are in the wrong
Email [email protected] if you wish to exercise any of these rights. We reply as soon as we can and within a month at the latest. If you want to complain, go to the Swedish Authority for Privacy Protection — you do not need to contact us first.
