Privacy Policy

1. Introduction

This Privacy Policy describes how ShiftSpace AB ("we", "us", "our") collects, uses, and protects personal data in connection with our website and our mobile applications AR View and AR Härnösand ("our apps").

ShiftSpace AB is the data controller for personal data processed through our services.

Company registration number: 559528-5692
Address: Paketgränd 15, 122 48 Enskede, Sweden
Contact: privacy@shiftspace.se

This policy explains what information we collect, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).

2. Information we collect

Our website

Our website (shiftspace.se) is a static informational site. We do not use analytics scripts, tracking pixels, or advertising technologies. We do not collect your name, email address, or any other personal data through the website unless you send us a message through the contact form or contact us directly by email.

Contact form

When you use the contact form on our website, we collect the name, email address and message you enter. The form is handled by Formspree, Inc., a service based in the United States, which receives your submission, stores it and forwards it to us by email. Formspree acts as our data processor and handles your submission only to deliver it to us. Because Formspree is located in the United States, your submission is transferred outside the EU/EEA; Formspree states that such transfers are made with appropriate safeguards, as described in the Formspree privacy policy. Please do not include sensitive personal data in your message.

The website loads fonts from Google Fonts (fonts.googleapis.com). This request may expose your IP address to Google's servers. We do not receive or store this data. See Google's privacy policy at policies.google.com/privacy for details.

Our apps

AR View is an augmented-reality viewing application. AR Härnösand is an augmented-reality Christmas calendar made for Härnösand: pointed at a printed picture, it shows a new animated scene each day from 1 to 24 December.

Neither app requires an account. We do not ask for your name, email, phone number, location, or any other directly identifying information. The apps contain no advertising, no in-app purchases and no analytics.

Camera. The apps use the camera to show 3D content in your surroundings. Camera images are processed only on your device. They are never stored, and never sent to us or to anyone else.

Downloaded content. The apps download their 3D scenes and a small list of available content from our storage at Microsoft Azure (data centres in the EU). As with any request over the internet, Microsoft receives your device's IP address in order to deliver the files. We do not log or store these IP addresses, and we cannot use them to identify you.

Data stored on your device. Downloaded content is kept on your device so the app can start quickly and work offline. If you are a tester and enter a test code, a scrambled (hashed) copy of the code is also kept on your device. None of this is sent to us. Uninstalling the app removes it.

Beyond ARCore (described below), the apps do not collect diagnostic or usage data beyond what the operating system platform (iOS/Android) may collect on our behalf by default.

Google Play Services for AR (ARCore)

On Android, our apps rely on Google Play Services for AR (ARCore), operated by Google LLC. ARCore may collect device identifiers plus performance and diagnostic telemetry and send it to Google. This processing is covered by the Google Privacy Policy. We do not receive this data or control how Google handles it. You can manage Google's data handling via Google's privacy controls. On iOS, our apps use Apple's ARKit, which runs on your device.

AR Härnösand uses only ARCore features that run on your device, such as image recognition, motion tracking and surface detection. It does not use features that send camera or location data to Google, such as Cloud Anchors or the Geospatial API.

3. Cookies

Our website does not set any cookies of its own. We do not use cookies for analytics, advertising, or personalisation.

Third-party requests made by the website — specifically the Google Fonts stylesheet — may result in cookies being set by Google in accordance with their own policies. These are technical in nature and are not under our control.

You can manage or block cookies through your browser settings. Blocking third-party cookies will not affect the functionality of our website.

Our apps do not use cookies.

4. How we use your information

If you contact us through the contact form or by email, we use the information you provide solely to respond to your enquiry. We do not use personal data for marketing, advertising, profiling, or automated decision-making.

The lawful basis for processing contact form submissions and email correspondence is our legitimate interest under Article 6(1)(f) GDPR in responding to enquiries, or — where applicable — the performance of a contract under Article 6(1)(b) GDPR.

5. Data sharing

We do not sell personal data. We do not share personal data with third parties except where required by law or by a court order, and with the service providers that process data on our behalf as described in this policy.

Contact form submissions are processed by Formspree, Inc. (United States) as our data processor, solely to deliver your message to us. See the Formspree privacy policy for details.

Our website is hosted on GitHub Pages. GitHub may log standard server access data (IP addresses, browser type, referring pages) in accordance with their own privacy statement. We do not have access to these logs.

The content our apps download is hosted by Microsoft Azure in the EU, as described in section 2.

6. Data retention

Contact form submissions and email correspondence are retained for as long as necessary to handle your enquiry and for a reasonable period afterwards for record-keeping purposes, and then deleted. We also delete form submissions stored with Formspree once they have been delivered to us and are no longer needed.

Our apps do not send us any personal data, so we hold none to retain.

7. Security

Our apps download content only over encrypted connections (HTTPS). Camera images never leave your device, and our apps send us no personal data, so we hold none that could be lost. Messages sent through the contact form are encrypted in transit and stored only with Formspree and in our email.

8. Your rights under GDPR

If you are located in the EU or EEA, you have the following rights regarding personal data we process about you:

• The right of access (Art. 15)
• The right to rectification (Art. 16)
• The right to erasure (Art. 17)
• The right to restriction of processing (Art. 18)
• The right to data portability (Art. 20)
• The right to object to processing based on legitimate interests (Art. 21)

To exercise any of these rights, contact us at privacy@shiftspace.se.

If data is collected by third-party SDKs such as ARCore, deletion requests need to be submitted to Google through their privacy controls, since we cannot access that information ourselves.

You also have the right to lodge a complaint with a supervisory authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY) — imy.se.

9. Children

AR Härnösand is a Christmas calendar made for children and their families, and AR View includes content intended to be engaging for children. We recommend that children use our apps together with a parent or guardian.

AR Härnösand is built so that children can use it safely:

• it does not collect any personal data from children (or anyone else);
• it has no accounts, no chat and no way to share content with others;
• it contains no advertising and no in-app purchases;
• it contains no links out of the app to websites or other apps.

Because AR Härnösand collects no personal data, there is nothing about a child for a parent to review or delete. Parents and guardians can still contact us at any time with questions.

If you are a parent or guardian and believe a child has given us personal data (for example by emailing us), contact privacy@shiftspace.se and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Material changes will be communicated through our website or, where applicable, through our products.

11. Contact

Questions or requests about this policy or your personal data can be sent to privacy@shiftspace.se, or by post to:
ShiftSpace AB, Paketgränd 15, 122 48 Enskede, Sweden.