How we handle your data, what we collect, and what we don't. Transparency matters.
This Privacy Policy explains how Mikael Vesavuori ("we," "us," or "Phaset") collects, uses, and protects your personal data when you visit our website or use our software.
The short version: We collect as little as possible. Your operational data stays on your infrastructure. We don't sell or share your data with third parties.
Core Principle: Phaset is designed for self-hosting. When you run Phaset on your infrastructure, all your operational data—catalogs, metrics, documentation—stays entirely under your control. We never see it, access it, or store it.
Data Controller: Mikael Vesavuori
Email: contact@phaset.dev
Location: Göteborg, Sweden
As a Sweden-based business, we comply with the General Data Protection Regulation (GDPR) and Swedish data protection laws.
We use Umami, a privacy-focused analytics service, to understand how visitors use our website. Umami is GDPR-compliant and does not use cookies.
What we collect through Umami:
What we DON'T collect:
Umami data is hosted on Umami Cloud and aggregated anonymously. We cannot identify individual visitors from this data.
When you purchase a license, we collect:
Payment processing is handled by Polar. We do not store your credit card information—Polar handles all payment data securely.
When you run Phaset, the software performs a boot-time license check to validate your license key and guard against abuse. This check is made to our first-party back office system and includes:
This check happens only at startup and does not involve any operational data from your Phaset deployment.
If you contact us for support, we collect:
This is equally important. We do NOT collect:
We use the data we collect for these specific purposes:
Under GDPR, we process your data based on:
We share data only with essential service providers:
We do NOT:
We retain your data for as long as necessary:
After these periods, data is securely deleted or anonymized.
As an individual in the EU/EEA, you have these rights:
Request a copy of all personal data we hold about you.
Request corrections to inaccurate or incomplete data.
Request deletion of your personal data, subject to legal retention requirements.
Request that we limit how we use your data.
Request your data in a machine-readable format to transfer elsewhere.
Object to processing based on legitimate interests (e.g., analytics).
Withdraw consent for data processing that relies on it (doesn't affect lawfulness of prior processing).
File a complaint with your local data protection authority if you believe we've violated your rights.
To exercise your rights: Email contact@phaset.dev with your request. We'll respond within 30 days.
We protect your data with:
For your self-hosted Phaset instance, you are responsible for securing your deployment, including:
Our service providers (Polar, Umami) operate within the EU and comply with GDPR. If data must be transferred outside the EU, it's done under appropriate safeguards:
Phaset is not intended for individuals under 16. We do not knowingly collect data from children. If we discover we've collected data from a child, we'll delete it promptly.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we do:
Continued use of our website or software after changes means you accept the updated policy.
Questions, concerns, or requests about your privacy?
Email: contact@phaset.dev
Response time: We aim to respond within 5 business days
For GDPR-related requests, include "GDPR Request" in your subject line for faster processing.
Our commitment: We built Phaset with privacy as a core principle. Self-hosting means you control your data. We collect only what's necessary to run the business and improve the product. Your trust matters to us.
We're here to help. Reach out if you have any concerns about your data.