Privacy Policy

Who we are

Smirky.dev is a multiplayer code editor built by a student team based in Prague. We operate the website at smirky.dev and the associated waitlist. References to "we," "us," or "our" in this policy refer to the Smirky team.

You can reach us at info@smirky.dev with any questions or requests relating to your personal data.

What we collect

When you join our private beta waitlist, we collect:

• Email address — required to send you your access notification.
• First name — used to personalise your waitlist ticket and any communications.
• Waitlist position number — auto-assigned when you sign up, stored alongside your name and email.
• Timestamp — the date and time you joined, used to maintain queue order.
• Source tag — records which page or referral path you came from (e.g. landing-email), so we can understand which channels are working.

We do not collect payment information, precise location, government IDs, or any sensitive personal data.

How we use your data

We use your information for the following purposes:

• Beta access notification — one email when your place in the queue becomes active.
• Occasional product updates — infrequent announcements about Smirky that we believe are genuinely relevant to you as a waitlist member.
• Personalised ticket — your first name is displayed on the private beta ticket shown in your browser (client-side only).
• Queue management — your timestamp and ticket number maintain fair ordering of access.
• Analytics — we use Google Analytics to understand how people interact with our website (pages visited, referrers, device types). This data is aggregated and anonymised; it does not link directly to your email.

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

Legal basis for processing

Under GDPR and similar regulations, we rely on the following legal bases:

• Consent — by submitting the waitlist form, you consent to us storing and using your email and name as described above. You can withdraw consent at any time.
• Legitimate interests — for analytics and understanding how our website performs, where this does not override your rights or interests.

Third-party services

We use the following sub-processors to operate our service:

• Google Firebase (Firestore) — stores your email, first name, and ticket data in a cloud database. Data is processed in accordance with Google's Firebase Privacy Notice.
• Google Analytics — collects anonymised website usage data using cookies. You can opt out via the Google Analytics opt-out browser add-on.
• Google Fonts — fonts are loaded from Google's CDN. Google may collect limited technical data (e.g. IP address) as part of this request.

Each of these services has its own privacy policy. We have Data Processing Agreements in place where required.

Cookies

We use cookies and similar technologies for the following purposes:

• Analytics cookies (Google Analytics) — track page views, session duration, and referral sources. These are non-essential cookies; we use them to understand how our landing page performs.
• No advertising cookies — we do not use any advertising or tracking pixels.

Most browsers allow you to control cookies through their settings. Disabling analytics cookies will not affect your ability to join the waitlist.

Data retention

We retain your waitlist data for as long as it is necessary to:

• Manage and fulfil your waitlist spot, or
• Send you the beta access notification you signed up for.

After the private beta concludes or if you request deletion, your personal data will be permanently removed from our systems within 30 days. Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify you.

Your rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate information.
• Deletion ("right to be forgotten") — ask us to delete your personal data.
• Portability — receive your data in a commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — opt out at any time; this won't affect the lawfulness of prior processing.

To exercise any of these rights, email us at info@smirky.dev. We will respond within 30 days.

Data security

Your data is stored in Google Firebase with access controls limited to the Smirky team. All data is transmitted over HTTPS. We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or disclosure.

No method of transmission over the internet is 100% secure. If a breach occurs that affects your rights, we will notify you as required by applicable law.

Children's privacy

Smirky.dev is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Material changes will be communicated to waitlist members via email where required by law.

Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out:

• Email: info@smirky.dev
• Team: Smirky.dev, Prague, Czech Republic