Privacy Policy

Last updated: September 17, 2026

This Privacy Policy describes how Mökkihetki Oy ("we", "us", "our") processes your personal data when you use the mokkihetki.fi service.

By using the service, you acknowledge this policy. If you do not agree, please do not use the service.

1. Data controller

The data controller is Mökkihetki Oy (Business ID 3220046-1), registered at Siilintie 25, 04320 Tuusula. For privacy questions, contact us at info@mokkihetki.fi.

2. Information we collect

We collect information you provide to us and limited technical data needed to operate the service.

a. Account data

When you create an account or sign in, we process:

  • Email address
  • Name (if you provide it)
  • Password (handled by our authentication provider; we do not store it in plain text)

b. Listings and content

If you create a cottage listing, we process the information you submit, such as:

  • Location and address details (street address, city, postal code, country)
  • Listing details (title, description, features)
  • Images you upload for your listing

c. Messages and enquiries

If you contact a cottage owner through our forms, we process your name, email address, and message to deliver it to the owner.

d. Payments

To sell subscriptions for publishing listings, we use Stripe. We store identifiers such as Stripe customer and subscription IDs, but we do not store card details.

e. Location search

When you use address/place autocomplete, your search query and selected result may be sent to the Finnish National Land Survey (Maanmittauslaitos) geocoding API to return suggestions.

f. Usage data and analytics

We collect anonymised usage data (such as pages visited and event types) on a legitimate interest basis to measure and improve the service. This is done via server-side calls that do not set cookies and do not identify you personally. If you also opt in to analytics and/or marketing cookies, we additionally attach pseudonymous identifiers (hashed email, user ID, browser client ID) to improve measurement accuracy. You can change your cookie choices at any time from the cookie settings button.

3. How we use your information

We use your information to:

  • Provide and maintain the service
  • Manage your account and listings
  • Process payments and subscriptions
  • Enable communication between cottage owners and people making enquiries
  • Provide customer support
  • Understand usage and improve the service (anonymously by default; with identifiers if you opt in to analytics)
  • Detect, prevent, and address fraud and technical issues

4. Service providers

We do not sell personal data. We use service providers to run the service:

  • Supabase: Database, authentication, and file storage (for example listing images).
  • Stripe: Payment processing and subscription management. Payment details are provided directly to Stripe.
  • Resend: Sending transactional emails (for example confirmations and notifications).
  • Google Analytics 4: We send anonymous measurement events to Google Analytics 4 via the server-side Measurement Protocol on a legitimate interest basis. If you opt in to analytics cookies, we additionally include a pseudonymous browser client ID and hashed user ID to improve accuracy.
  • Meta (Conversions API): We send anonymous conversion events to Meta via the server-side Conversions API on a legitimate interest basis. If you opt in to marketing cookies, we additionally include a hashed email address and user ID. No raw personal data is ever sent to Meta.
  • Maanmittauslaitos: Geocoding suggestions for address and place search.

5. Legal bases for processing

We process personal data under the following legal bases: (a) Contract performance — processing necessary to provide the service you signed up for (account management, listings, payments, messaging); (b) Legitimate interest — anonymised server-side analytics to measure and improve the service; (c) Consent — attaching pseudonymous identifiers to analytics and marketing events, and loading browser-side tracking tools (Google Tag Manager, Meta Pixel). You may withdraw consent at any time from the cookie settings button without affecting the lawfulness of processing before withdrawal.

6. Cookies

We use a strictly necessary consent cookie to remember your choices. Analytics and marketing cookies are optional and only activated when you opt in. Even without cookies, we collect anonymised usage data server-side on a legitimate interest basis (no cookies are set for this).

7. Data security

We use reasonable technical and organizational measures to protect your data, including access controls and database row-level security. No system is 100% secure, but we continuously work to reduce risks.

8. Your rights

You can access and update your account information in your account settings. You can also request deletion of your account by contacting us.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page.

10. Contact

Questions about privacy? Contact us via our contact page .