Privacy policy

Service and contact

Fiksusti compares mobile plans, broadband, electricity contracts, insurance, streaming services and audiobook services available in Finland. For privacy matters, contact info@fiksusti.fi.

Comparisons and local storage

The contract, pricing and consumption details you provide are used to create comparisons and savings estimates. The website stores comparison answers and settings in browser local storage. The mobile app stores comparison and profile information, settings and caches on your device. Not all local comparison information is sent to the server.

Fiksusti Watch, Electricity Watch and contract reminders

Watch and reminder functions use a random access key. The website stores it in a protected session cookie. The iOS app stores it in Keychain without iCloud synchronisation. The backend associates records with a digest of the key. The records are pseudonymous, not anonymous.

The Supabase database stores the contract and pricing details, settings, contract end dates, and notification and delivery history needed for the function. Electricity Watch records include a postal code and annual consumption. Records are used to compare alternatives, operate watches and provide selected reminders.

Emails and feedback

Email functions store your email address, verification status, language and notification settings. Your address is verified before notifications begin. Offer emails have a separate optional choice.

Resend processes the recipient address, subject, message content and delivery-related information. Messages may contain contract details, savings estimates, reminders and verification or unsubscribe links. Feedback you submit and an optional reply address are delivered to Fiksusti through Resend.

Google Analytics and cookie choices

The website loads optional Google Analytics only after you accept analytics. It measures website usage. The website's own page-view events send the page address without query parameters or fragments, the page title and the referring page address without query parameters or fragments.

You can accept or reject analytics and change your choice using the Cookie settings button on the page. Withdrawal blocks subsequent analytics transmission from this website and removes applicable first-party GA cookies. It does not automatically erase information already sent to Google. The reviewed mobile implementation has no active analytics SDK.

Affiliate links and external services

Some links are affiliate links. Fiksusti may receive a commission for an eligible order made through them. Links contain partner and campaign identifiers. The external service processes web-request information and may use its own cookies under its privacy policy. Your Fiksusti analytics choice does not control the partner service's cookies.

Retention and security

Local information remains until removed through the app or browser storage. Watches, reminders and their history are not yet automatically deleted after a retention period. Database cleanup deletes a rate-limit record when more than 48 hours have passed since its last update and its counting window began more than 24 hours ago. Cleanup clears the expired verification-token digest and expiry value in unverified email settings; it does not delete the email address, settings record or verified information. An unusable verification token with no expiry is also cleared. Link expiry alone does not delete a database record.

Automatic cleanup is scheduled daily at 06:00 UTC as part of the existing watch and reminder processing job. Each run handles at most 500 rate-limit records and at most 500 verification tokens. The daily schedule, batch limit or a failed run may delay cleanup; 48 hours is therefore not a guaranteed maximum retention period.

Abuse-prevention counter keys are keyed digests of the source address or access identifier. Those database records do not store the raw source address or Watch identifier. This does not describe every provider's logging. Security measures include HTTPS connections, server-side access restrictions, identifier hashing and rate limits.

Deleting app data

In the mobile app, choose Settings → Delete my Fiksusti data and confirm. Deletion covers phone and electricity watches, contract reminders, email settings and related notification and delivery history associated with the same Watch identifier. Derivable identifier-based rate-limit counters are deleted.

Local comparison and profile information, caches and the access key are removed only after server confirmation. A network failure keeps the information available for retrying. Deletion does not automatically cover information stored under different identifiers on other devices or browsers.

Delivered emails, feedback, partner-service records and some technical counters, logs and backups may remain. The current deletion function does not erase information from every service provider's systems.

Your rights

Under applicable data protection law, you may request access, correction, erasure or restriction and, where applicable, object to processing or request portability. You may withdraw consent and complain to the Finnish Data Protection Ombudsman. Send privacy requests to info@fiksusti.fi. Ownership may need to be verified securely; do not send your Watch access key by email.

Policy updates

This policy is updated as the service and its processing change. The update date is shown on this page.