Solvarv is sold by 10yx OÜ, a private limited company registered in Estonia. 10yx OÜ is the data controller for the processing described here.
Our guiding principle is to collect as little as possible. Solvarv itself is designed to store your data only on your own device and never transmit it to us at all — see section 2.
1. What we collect, why, and on what basis
1.1 Purchases
When you buy Solvarv, our payment processor Stripe collects your email address, billing details, country, and payment card information in order to take payment. We do not receive or store your full card number. We receive your email address, the amount paid, the product purchased, and the country used for tax purposes.
Purpose: to perform the purchase contract, deliver the product, and meet our accounting and tax obligations. Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and compliance with a legal obligation (Art. 6(1)(c)).
1.2 Product delivery and download access
Solvarv is delivered as a download. We use your email address to send you that download and, where the download is access-controlled, to authorise you to retrieve it. In that case your email address is held in an access list operated by Cloudflare, and a record is kept of when a download was authorised.
Purpose: to deliver what you paid for and to prevent unauthorised distribution. Legal basis: performance of a contract (Art. 6(1)(b)) and our legitimate interest in protecting our products (Art. 6(1)(f)).
1.3 Mailing list
If you submit your email address on this site to be notified about Solvarv or its updates, we store that address — together with any feedback you choose to include and the country your request came from — until you unsubscribe or ask us to delete it. We do not add purchasers to a mailing list automatically.
Purpose: to send you the updates you asked for. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.
1.4 Correspondence
If you email us, we keep the message and your address so we can reply and keep a record of support history. Legal basis: legitimate interest in responding to enquiries (Art. 6(1)(f)).
1.5 Website analytics and security
This site uses no advertising or analytics cookies, and no third-party tracking or advertising scripts. Where traffic measurement is enabled, it is Cloudflare's aggregate, cookieless, server-side analytics — no cookies are set, no cross-site tracking occurs, and no personal data is shared with advertisers.
Cloudflare, as the CDN and security layer serving this site, processes IP addresses and may set a strictly-necessary security cookie (such as __cf_bm) for bot detection. This cookie is exempt from consent requirements under applicable law. Legal basis: legitimate interest in keeping our services available and secure (Art. 6(1)(f)).
2. What the Solvarv app collects
Nothing. Solvarv has no account, no sync, no telemetry, no crash reporting, and no server component. Your plans, blocks, and templates are stored solely on your own device. The app does not communicate with our servers, and we could not retrieve your content if we wanted to.
This is a binding commitment, not a marketing line. The only personal data we hold in connection with Solvarv is what section 1 describes — your purchase, delivery, and correspondence details — none of which comes from the app.
Should we ever offer a product that does report usage or crash data, that will be stated plainly on its own page before purchase, and it will not be enabled without a clear disclosure.
3. Who we share it with
We do not sell, rent, or trade personal data, and we do not share it for advertising. We use a small number of processors who act on our instructions under contract:
- Stripe — payment processing, invoicing, and tax calculation.
- Cloudflare — website and file hosting, CDN, security, cookieless analytics, mailing-list storage, and download access control.
- Our email provider — sending transactional and update emails.
We may also disclose personal data where we are legally required to do so.
4. International transfers
Some of our processors operate outside the European Economic Area. Where personal data is transferred outside the EEA, it is protected by an adequacy decision or by Standard Contractual Clauses approved by the European Commission, together with the processor's own supplementary safeguards.
5. How long we keep it
- Purchase and transaction records — as required by the Estonian Accounting Act, at least seven years after the end of the financial year to which they relate.
- Download access entitlements — for as long as you retain access to the product, or until you ask us to remove them.
- Mailing list entries — until you unsubscribe or ask for deletion.
- Correspondence — normally up to two years after the matter is closed.
6. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, and we keep the amount of data we hold deliberately small. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your rights
Under the GDPR you have the right to access your personal data; to have it corrected or erased; to restrict or object to its processing; to receive it in a portable format; and, where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, email [email protected]. We will respond within one month.
If you believe we have handled your personal data unlawfully, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or with the supervisory authority in your country of residence.
8. Children
Solvarv is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.
9. Contact
10yx OÜ
Registry code: 16759342
Sakala tn 7-2, Kesklinna linnaosa
10141 Tallinn, Harju maakond, Estonia
Email: [email protected]
10. Changes
We may update this Policy as our services develop. The "last updated" date above always reflects the current version, and we will notify customers of any significant change affecting them.