Legal · Consent text
Privacy Policy
In short. We only ask for your email and a few answers about your Mac — to invite you to the beta and to decide what to build first. We don't sell data or show ads. The site sets no cookies. To delete your application, email support@sparku.su; to unsubscribe, use the link in any email.
Last updated: October 15, 2026.
1. Who we are
The data controller is Egor Aleksandrovich Lihachev (Orenburg, Russia), an individual and the author of SparkU ("we", "us").
Contact for anything about your data: support@sparku.su.
This policy covers the getsparku.app website (including the Russian version under /ru/), the beta application form and waitlist emails. It follows the EU General Data Protection Regulation (GDPR) and Russian Federal Law No. 152-FZ "On Personal Data", which applies to us as a Russia-based controller.
Your consent is recorded separately, in the Consent to Personal Data Processing you give with the checkbox in the beta form.
2. What we collect
Website visitors. We don't ask who you are and don't set cookies. We count visits with anonymized statistics (section 8).
Beta applicants:
| Data | Required | Why |
|---|---|---|
| Email address | yes | to send your invite, your access key and launch news |
| Role (from a list) | yes | to understand who needs SparkU most and invite in waves |
| Mac model and macOS version (from a list) | yes | to check compatibility and invite people it will work for |
| Apps you use (from a list) | no | to decide which integrations to build first |
| Wish — free text | no | same; please don't include personal details there |
| Form language | automatic | to write to you in it |
| Visit source (section 7) | automatic | to see which channels bring people |
| Application date, consent date and version | automatic | to prove that consent was given |
Once you're invited, we add your access key and the invite date.
Beta users in the app. When you enter your key in the SparkU app, it sends the key, a random install ID and your computer's name to the license server (the name appears in the device list in Settings so you can unlink an old Mac). Your email is not sent.
We don't collect special categories of data (health, beliefs, biometrics and so on).
3. Purposes and legal bases
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Waitlist: invite you, send your key, announce the launch | the full application | your consent (GDPR Art. 6(1)(a)) | until you withdraw consent or until the beta ends and version 1.0 ships, but no longer than 3 years from applying |
| Issuing and checking your beta key | key, install ID, computer name | performing what you asked for (Art. 6(1)(b)) | while the key is active, then 30 days |
| Protecting the form from spam | IP address | legitimate interest (Art. 6(1)(f)); never written to the database | 10 minutes in server memory |
| Visit statistics | anonymized data (section 8) | legitimate interest; no personal data stored | per the analytics service's rules |
We don't make automated decisions with legal effects on you, and we don't sell your data or share it for anyone's advertising.
4. How we process data
Processing is automated and happens over the internet: collection, recording, organization, storage, updating, retrieval, use, disclosure to the processors in section 5, restriction, erasure and destruction.
Only the controller can access applications. We don't publish data or share it with anyone except the processors below, who act on our instructions and only for the stated purposes, and except where the law requires it.
5. Processors and where data is stored
| Processor | Data location | What they receive | Why |
|---|---|---|---|
| Application server — hosting provider IT-Garage | Moscow, Russia | the full application | receiving and storing applications, sending emails |
| Plus Five Five, Inc. (Resend) | USA | email address and email content | email delivery |
| Cloudflare, Inc. | USA (global network) | IP address and request metadata; applications pass through its network to the server | serving the site, attack protection |
| Supabase, Inc. | Ireland (EU) | beta key, install ID, computer name; IP address when you download the installer | issuing and checking keys, hosting the app download |
| Umami Software, Inc. | USA | anonymized statistics without IP addresses | counting visits |
6. International transfers
Applications are stored on a server in Russia, as Russian law requires for data of Russian citizens. Russia is not covered by an EU adequacy decision; if you are in the EU, your data is transferred there on the basis of your explicit consent (GDPR Art. 49(1)(a)) — the consent form says so. Other processors are in the USA and Ireland and work under data processing agreements with the European Commission's Standard Contractual Clauses. All data is encrypted in transit.
7. Visit source
If you arrive through a tagged link — say, from a social profile — those tags (utm_source, utm_medium, utm_campaign, utm_content, p, for), the domain of the site you came from and the first page you opened are kept in your browser tab (sessionStorage, not a cookie) and sent with your application. We see where an application came from, not what you did on other sites. Close the tab and the record is gone.
8. Cookies and statistics
The site sets no cookies. Browser storage holds only:
sparku.source— the visit source (section 7), until you close the tab;sparku.analytics— your opt-out from statistics, if you chose it.
Visits are counted by Umami through our own relay. Your IP address is never sent to Umami: it is replaced with a one-way pseudonym that changes every month. Umami receives your country (from Cloudflare), browser and OS type, screen size, language, pages viewed, referring site and clicks on key buttons. None of this identifies you.
To turn statistics off in your browser, open getsparku.app/?analytics=off. To turn them back on, use ?analytics=on.
9. Retention and deletion
We keep applications until you withdraw consent or until the purpose is met — the beta ends and version 1.0 ships — and never longer than 3 years from the application date. Then the data is destroyed. Processors' logs are kept under their own rules and deleted automatically.
Unsubscribing via the email link stops emails immediately. Deleting your application entirely: email support@sparku.su. When you withdraw consent, we stop processing and destroy your data within 30 days, usually much sooner.
10. Your rights
You can:
- find out what data we hold about you, where it came from, why and who receives it;
- have it corrected, restricted or erased;
- get a copy in a machine-readable format;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting processing done before;
- complain to your local data protection authority (in the EU) or to Roskomnadzor (in Russia).
Email support@sparku.su from the address in your application so we know the request is yours. We reply within 10 business days and in any case within one month.
11. Security
- All connections to the site and the application server use HTTPS.
- Only the controller can access the application database and admin panel, with a secret key.
- The application server rate-limits submissions per address and rejects disposable mailboxes.
- Processors only get what their task needs: for example, the license server receives an anonymous application ID instead of your email.
12. Children
The beta is meant for adults. If you are under 16, don't apply without your parent's permission. If we learn we received a child's data without it, we'll delete it.
13. Changes
When the data we collect, our processors or our purposes change, we update this page and the date at the top. If a change affects data already collected and needs new consent, we'll email the waitlist.
Russian version: getsparku.app/ru/privacy/.