Privacy Policy

Who is responsible for your data

HandyLay ("we", "us") operates the website available at handylay.app. For the purposes of the General Data Protection Regulation (GDPR), we act as the data controller for the limited set of data described in this policy.

If you have a question about this policy, or you want to exercise any of your rights, write to contact [at] handylay [dot] app. We answer every message, and always within 30 days for requests concerning personal data.

What we do not collect

• We do not require registration and we do not maintain user accounts.
• We do not ask for your name, postal address or phone number.
• Your floor plans, room dimensions, patterns and uploaded textures are never sent to our servers - they are created and stored entirely inside your browser.
• We do not sell personal data and we do not share it with data brokers.

Data stored inside your browser

The planner uses your browser's local storage so that your work survives a page reload. The following is written to your device and stays there:

• Saved projects - surfaces, walls, dimensions and the patterns applied to them.
• Custom textures - an image you add to a pattern is scaled down to at most 1024 pixels on its longer side, compressed and stored as text (base64) inside that pattern, in the same local storage. They are never uploaded anywhere.
• Custom patterns - tile patterns you build in the pattern editor.
• Language preference - a preferredLanguage cookie so the site opens in the language you last chose.

You are in control of that data

Everything listed above stays on your device. You can erase all of it at any moment by clearing site data for handylay.app in your browser settings. We have no way of reading it and no way of restoring it once you delete it, so export or write down anything you need to keep.

Third-party services we use

Using HandyLay means your browser also contacts the services below. Each of them may process technical data such as your IP address, device and browser type, and the pages you open.

• Google AdSense - displays advertising. Google and its partners may use cookies and similar technologies to select and measure ads, including personalised ads where you have consented. Details: policies.google.com/technologies/ads
• Sentry - collects technical error reports (stack trace, browser version, the page where the error occurred) so that crashes can be fixed. Details: sentry.io/privacy
• Cloudflare Web Analytics - cookie-free traffic measurement that does not fingerprint visitors. Details: cloudflare.com/privacypolicy
• YouTube - the tutorial video on the home page is embedded from YouTube, which sets its own cookies once the player loads. Details: policies.google.com/privacy

Advertising and personalised ads

HandyLay is free and is paid for by advertising. Google, as a third-party vendor, uses cookies to serve ads on this site. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and other sites on the internet.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before any advertising cookie is set, using a consent management platform certified by Google. You can change or withdraw that consent at any time - the Cookie Policy explains how.

Wherever you are, you can opt out of personalised advertising through Google Ads Settings at adssettings.google.com, or opt out of third-party vendor cookies at aboutads.info.

Legal basis for processing

• Consent, Art. 6(1)(a) GDPR - advertising and every other non-essential cookie.
• Legitimate interest, Art. 6(1)(f) GDPR - keeping the site secure and available and diagnosing errors from aggregated technical logs.
• Performance of a service you requested, Art. 6(1)(b) GDPR - delivering the pages and assets your browser asks for.

How long data is kept

Data held in your browser stays until you delete it. Technical error reports are retained by Sentry for up to 90 days. Advertising cookies have retention periods set by their respective providers; the consent banner lists them before you make a choice.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format.

Because we hold no account data, the fastest route for data held by the third parties listed above is to contact them directly - but write to us if you would like help. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO).

International transfers

Some of the providers listed above process data outside the European Economic Area, mainly in the United States. They rely on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework as their transfer mechanism.

Children

HandyLay is not directed at children under 16 and we do not knowingly process their personal data.

Changes to this policy

We update this document whenever the services we use change. The date at the top always reflects the current version, and material changes are announced on the site.

Contact

Questions about privacy: contact [at] handylay [dot] app.