Privacy
Privacy policy
Last updated 6 October 2026.
In short
| Who is responsible | Chatano AB, organisation number 556760-3559, Stockholm, Sweden |
|---|---|
| What we collect | Only if you accept analytics: anonymous usage statistics: pages viewed, how far you scroll, rough time on page and which external sites you follow links to. |
| What we never collect | Your name, email address, anything you type, full web addresses, query strings or cookies. |
| Legal basis | Your consent. You can withdraw it at any time. |
| Where it is stored | Microsoft Azure, West Europe region (the Netherlands) |
| How long | 90 days, then deleted |
Your analytics choice: Loading…
Who we are
Chatano AB is the data controller for chatano.se.
- Company
- Chatano AB
- Registered office
- Stockholm, Sweden
- Organisation number
- 556760-3559
- VAT number
- SE556760355901
- Address
- Reimersholmsgatan 71, 6tr, 117 40 Stockholm
- tao [at] chatano.se
Analytics – only with your consent
When you first visit, we ask whether you accept analytics. Nothing is collected until you click Accept. If you decline, no analytics runs at all. The site works the same either way.
If you accept, your browser sends these events to our analytics service, and nothing else:
| Page view | The page’s path, for example /privacy.html, never anything after ? or #. On the first page of a visit, also: that first page’s path; the domain of the site that linked to us (for example google.com, never the full address), or “direct” if there was none; a device category (desktop, tablet or mobile); and a screen-width range (small, medium or large). |
|---|---|
| Scroll depth | The page’s path and how far down you scrolled: 25, 50, 75 or 100 percent, each once per page. |
| Engagement | When you hide or leave a page you looked at for at least 5 seconds: the page’s path and a time range (5–29 seconds, 30–119 seconds, or 2 minutes or more). Only time the page was visible counts. |
| Outbound link | The page’s path and the domain of the external site you clicked through to, never the full address. |
Every event also carries:
- a random event ID and the time it happened;
- a random session ID that groups the events of one visit. It is created in your browser tab, kept only for that tab, and replaced with a new one when you return after 30 minutes or more without activity. It is not linked to you, your device or any other visit;
- your browser’s language setting, for example
sv_SE; - fixed labels identifying our website (project, environment, platform and version).
We never send names, email addresses, user IDs, anything you type, full web addresses or query strings.
Like any website, the servers that deliver the site and receive analytics see your IP address when your browser connects. We do not include it in analytics events or use it to identify you.
What is stored on your device
- Your analytics choice (
localStorage), so we don’t ask again on every visit. This is needed to respect your choice, so it is stored whether you accept or decline. - Session ID and the time of your last activity (
sessionStorage), only if you accept. Removed when you close the tab or withdraw consent.
We use no cookies, and the site loads no third-party trackers, advertising, social media widgets or externally hosted fonts.
Who processes the data
The site and our analytics service run on Microsoft Azure, which processes data on our behalf under a data processing agreement. Analytics data is stored in the Azure West Europe region (the Netherlands). Microsoft is a US company. In the rare cases where data is accessed from outside the EU, the transfer is covered by the EU–US Data Privacy Framework and the EU standard contractual clauses. We do not sell or share analytics data with anyone else.
How long we keep it
Analytics events are kept for 90 days and then deleted. We make no automated decisions about you based on this data.
Your rights
Under the EU General Data Protection Regulation (GDPR) you have the right to:
- withdraw your consent at any time, as easily as you gave it, using Analytics settings;
- request access to, correction of or deletion of data about you;
- object to or restrict processing;
- lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Because analytics data is anonymous and not linked to your identity, we usually cannot find records that belong to you specifically. Withdrawing consent stops all collection immediately. For any privacy question, email us at tao [at] chatano.se.
Changes
If we change how we handle data, we will update this page and the date at the top.