Privacy notice

Who is responsible

Petterik Oy, business ID 3102728-1, is the controller for this website and enquiries addressed to the company. Our address is Lekkerikallio 5, 02400 Kirkkonummi, Finland. Contact [email protected] about your information or this notice.

Browsing the website

Your browser sends technical information such as your IP address, requested page, browser details and request time to our hosting and security providers. We use this information to deliver the site, prevent abuse and investigate faults. Our legal basis is our legitimate interest in operating a reliable, secure website.

The application does not include advertising pixels, visitor analytics, embedded social feeds or marketing cookies. Fonts and images load from this site. Links to other websites open services with their own privacy practices.

AI prompt workshop

The optional prompt workshop uses Claude Opus 5 through Anthropic’s API. When you submit a prompt or answers, our server sends that text to Anthropic to ask clarifying questions or suggest an improved prompt. Use fictional examples; do not submit personal, sensitive or confidential information. You can browse the rest of the site without using AI.

We process workshop submissions to provide the exercise you request, under our legitimate interest in offering practical technology demonstrations. Drafts and results remain in your browser’s page memory until you leave or reload. Our application does not save them to a database or log their contents. If you copy a result, it remains in your device clipboard under your control. We keep request times to enforce a rolling 24-hour usage budget. We remove expired entries when accepting a new request. Those records contain no prompt text or visitor identifier.

Anthropic separately processes API inputs and outputs. Its standard policy provides deletion within 30 days, with exceptions for legal requirements, agreed arrangements and abuse investigations. Flagged content can be retained for up to two years, with trust and safety classification scores for up to seven years. See Anthropic’s API retention policy. Processing may involve countries outside the EEA. Contact our privacy address for the applicable supplier and transfer arrangements.

Local experiments

The games, music tools and 3D experiments keep their drawings and settings in browser memory until you leave or reload. Draw your drive stores your personal best in your browser. When the shared score service is available, it sends the wheel's 48 numeric radii to this website. The server validates them, calculates a design score and discards the wheel shape. It keeps one anonymous shared best score, without a drawing, account, player name or device identifier. The experiments do not use a microphone.

Groove sketch stays in browser memory unless you press Share. Sharing sends the six drawn pitch curves, tempo, selected drum pattern and optional snap settings to this website and stores them under a short link identifier. The shared groove contains no account, name or device identifier, but anyone with its link can open it. Do not use the drawing as a place to encode personal or confidential information. We keep a shared groove for 12 months from its first share and then delete it automatically. Sharing the same groove again uses the same link and does not restart that period.

Gesture sculptor offers optional camera hand control. After you choose it and grant browser permission, a locally running AI model estimates hand positions to control the clay. This site does not identify you, record camera frames or send frames or hand positions to a server. You can stop the camera at any time; it also stops when you leave the tab. Mouse and touch controls work without camera access.

Reality portal can request your device’s augmented-reality features to place a model on a surface. This site does not record or upload camera images or room maps. Apple Quick Look opens the model in Apple’s native viewer. Your device controls AR permissions and the viewer session.

Contact messages

The form asks for your name, email address and message. Company and topic are optional. We need a working email address to reply. You can also contact us directly by email or phone. Please do not include health information, passwords or other sensitive material.

We use business enquiries to discuss potential projects and respond to requests, under our legitimate interest in communicating with prospective clients and professional contacts. Where you ask us to take steps towards a contract with you personally, we process the necessary information for those pre-contractual steps. A contact message does not subscribe you to marketing.

Petteri Kolehmainen handles enquiries. Authorised service providers process information to operate the website and deliver email. Technical administrators may access information when necessary for support or security.

Privacy support

Sammeli Liikkanen Oy, trading as PalsaIQ, provides backup support for handling privacy requests and related data-protection matters on Petterik Oy’s instructions. Where needed for that task, it may receive your request, contact details and relevant correspondence. Its access is limited to the agreed support scope; Petterik Oy remains responsible as controller.

Services involved

• Hetzner: application hosting for the website and contact form.
• Cloudflare: DNS, web delivery and security. Web requests pass through its network.
• Amazon Web Services: Amazon SES sends contact messages, with delivery and failure events handled through SNS and SQS. The configured AWS region is Frankfurt, Germany.
• Google Workspace: the business mailbox used to receive and respond to enquiries.

The application does not keep a separate database of your message. Delivery services and the receiving mailbox process copies. Technical email events can include the recipient, message identifier, delivery status and email headers.

Processing locations

Although our application and email delivery use European hosting regions, some provider processing may take place elsewhere. Cloudflare’s network and service-provider support or subprocessors can involve countries outside the EEA, including the United States. Provider data-processing terms describe transfer safeguards, including European Commission standard contractual clauses where applicable. Contact us for information about the arrangements that apply to your data.

How long we keep information

For ordinary enquiries that do not become client work, our retention rule is deletion 12 months after the last substantive exchange. We review and delete these mailbox records manually. If an enquiry becomes client work, we retain the relevant correspondence under the engagement’s record-keeping requirements. We may retain specific records longer where a legal obligation or an active claim requires it, with access restricted to that purpose.

The application keeps temporary duplicate-prevention hashes in memory for up to one hour; it does not log message bodies. Email-feedback queues have a maximum retention of 14 days. Provider security, recovery and backup copies follow the applicable service arrangements and may persist after a message is removed from the active mailbox.

Your rights

You can ask for access, correction, deletion or restriction of your personal data. You may object to processing based on legitimate interests. Data portability applies where the legal conditions are met. Send requests to [email protected]; we may ask for proportionate information to verify your identity. We normally respond within one month and will explain any lawful extension.

You may complain to Finland’s Office of the Data Protection Ombudsman or your local supervisory authority.

AI and other products

Only the optional prompt workshop sends your submitted text to an AI model. We do not send contact messages to AI. The website does not make automated decisions with legal or similarly significant effects. Products described in the portfolio are separate services with their own notices where applicable.

Changes

We update this notice when the website’s processing changes. The date above identifies this version. Contact us if you need information about an earlier notice.