Privacy policy

What we collect when you visit our website or contact us, why, and what you can ask us to do with it.

Last updated: November 2026

Who is responsible

Smoother Development AB (org. no. 559526-3350), Sweden, is the controller for the personal data described here. Questions or requests: [email protected].

When we build or run software for a client and handle personal data on the client's behalf, the client is the controller and we act as their processor under a separate data processing agreement. This policy does not cover that data.

What we collect

  • Contact form: your name, work e-mail, company, what you need, budget range and message, plus the page you sent the form from, the page you first landed on, the referring site and any campaign parameters in the link you followed (for example utm_source).
  • E-mail and calls: what you tell us when you write to us or talk to us.
  • Analytics, only if you accept analytics cookies: pages viewed, approximate location (country or city), device and browser type, collected by Google Analytics.
  • Advertising measurement, only if you accept marketing cookies: whether a visit came from one of our LinkedIn or Meta ads and whether it led to an enquiry or a booked call. If you send the contact form, we also send Meta a hashed (irreversibly scrambled) copy of your e-mail address, your IP address, browser type and an event ID through Meta's Conversions API, so Meta can match the enquiry to the ad without receiving your address in plain text.

Why we use it and on what legal basis

PurposeLegal basis (GDPR)
Replying to your enquiry and preparing a proposalLegitimate interest (Art. 6(1)(f)) and steps before a contract at your request (Art. 6(1)(b))
Delivering a contract with your companyContract (Art. 6(1)(b)) or legitimate interest, for contact persons at a client
Bookkeeping and invoicesLegal obligation (Art. 6(1)(c)), Swedish Bookkeeping Act
Website analyticsConsent (Art. 6(1)(a)) and the Swedish Electronic Communications Act, ch. 9 § 28
Measuring our adsConsent (Art. 6(1)(a))

Who receives the data

We do not sell personal data. We share it only with service providers that help us run the website and our business:

  • Cloudflare: hosts this website and processes technical request data.
  • Telegram: our contact form delivers new enquiries to the founders through a private Telegram bot.
  • Google: analytics (with your consent) and e-mail.
  • LinkedIn and Meta: ad measurement, only with your consent and only if we run campaigns on those platforms. For Meta this includes the Conversions API described above.
  • Cal.com: our booking calendar. When you book a call, Cal.com processes your name, e-mail, the time you choose and anything you write in the booking form.
  • Attio: our CRM, where we keep enquiries, booked calls, contact details and notes from our conversations with you.
  • Our team: enquiries are handled by our founders. If a team member outside the EU/EEA, for example in our engineering team in Ukraine, needs to see an enquiry to prepare a proposal, the transfer is covered by the European Commission's Standard Contractual Clauses.

Transfers outside the EU/EEA

Some of the providers above process data outside the EU/EEA, for example in the United States. Where that happens, the transfer relies on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards that apply.

How long we keep it

  • Enquiries that don't lead to an assignment: deleted no later than 24 months after our last contact.
  • Client contact details and correspondence: for as long as the relationship lasts and up to 24 months after it ends.
  • Invoices and bookkeeping records: 7 years, as Swedish law requires.
  • Analytics data: up to 14 months.

Cookies and similar technologies

Only the strictly necessary item runs before you choose. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

NameProviderPurposeDuration
sd-consent (local storage)Smoother DevelopmentRemembers your cookie choiceUntil you clear it
sd-attribution (session storage)Smoother DevelopmentRemembers the page and campaign you arrived from, sent only if you submit the contact formUntil you close the tab
_ga, _ga_*Google AnalyticsAnalytics (consent required)Up to 2 years
li_sugr, bcookie, lidc, UserMatchHistoryLinkedInAd measurement (consent required)Up to 1 year
_fbpMetaAd measurement (consent required)3 months

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. E-mail [email protected] and we'll reply within one month.

If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).