Privacy policy
This page describes which personal data Stadsdelsguiden and the district guides handle, why, and what rights you have. It covers stadsdelsguiden.se, the sign-in service id.stadsdelsguiden.se and every guide in the family: norradjurgardsstaden.se, barkarbyguiden.se, slakthusguiden.se, sjostadsguiden.se, hagastadsguiden.se and liljeholmsguiden.se.
Data controller
Eightyfive AB, company registration number 556860-2634, Stockholm. Questions about personal data are answered at [email protected].
If you only visit a guide
Everything can be read without an account. The guides set no tracking cookies and sell no advertising. Visitor statistics are kept in our own self-hosted analytics tool (Umami), which uses no cookies and stores no IP addresses, and only counts page views and which links are clicked. Page views per business are counted as one number per day, with no link to you.
The servers keep technical logs with a timestamp, the page address and a pseudonymised (hashed) IP address. The logs serve operations and security, for example limiting sign-in attempts, and are pruned continuously.
If you have a business account
Business owners who want to manage their own page create an account on the district's guide. We then process your name, email address and password (stored as a hash), or the details that sign-in with Google or an emailed sign-in link provide. We also process what you publish about the business — opening hours, menus, offers, photos — and what is needed to verify that you represent the business when you claim a page. What you publish is public on the guide; the account details are not.
Administrators sign in through id.stadsdelsguiden.se, which may store a passkey. Only the public key is kept by us.
Sign-in with Google
If you choose to sign in with Google we receive your name, email address and profile picture from Google, and use them only to create and recognise your account. We request no other permissions, read nothing in your Google account and publish nothing there. Google's own privacy policy applies to Google's part of the sign-in.
We only send email that belongs to your account: confirmations, sign-in links, password resets and notices about your page. No newsletters. The sender is [email protected] through an email provider that processes the address for delivery.
Storage and processors
The guides run on servers within the EU. Backups are kept for 30 days within the EU. Menu photos a business owner uploads for automatic transcription are processed by Google's Vertex AI in the EU and are not kept by us beyond the result. We do not pass personal data to third parties beyond these providers, and never for marketing.
Your rights
You have the right to access, correct and erase your data, to object to processing and to have it moved. A business account is deleted on request; the page about the business remains in the directory, since it is built on public facts about a company. Write to [email protected]. You can also complain to the Swedish Authority for Privacy Protection (IMY).
Changes
This policy was updated on 5 September 2026. Changes are published on this page.