Privacy
The details you leave on the waiting list
This page is about the waiting list only. It is not about what Sofia stores concerning a student who uses the system — that is described separately, in the agreement, if and when the service opens.
Who is responsible
The data controller is Artem Kulachenko, a private individual, Sweden. Contact: hej@aems.app.
Sofia is a private project. It is not run by, and not affiliated with, any university or public authority.
What is stored, and why
When you join the waiting list, what you typed into the form is stored: your name, e-mail address, whether you are a parent, student or teacher, which test it concerns, which sitting you are aiming for, and any message you wrote. Also stored: which language edition of the page you signed up from, and the moment you gave consent.
No IP address and no browser fingerprint is stored in the database. To stop a flood of sign-ups from one place, attempts are counted per IP address in temporary memory (Redis), in a key that contains the address and expires by itself after an hour. It is never written to the database and never appears in an export.
There is one purpose: to be able to contact you about Sofia. The data is not used for anything else, not sold, not passed to any third party, and not used for profiling or advertising.
The lawful basis is your consent (GDPR article 6(1)(a)). You gave it by actively ticking the box — it was not pre-ticked — and the moment you did is stored alongside the entry.
Where it is held
In a database on a server in Germany, inside the EU/EEA. No part of the waiting list is transferred outside the EU/EEA.
This site sets no cookies, loads no analytics, and fetches nothing from anyone else's server. Even the fonts are served from our own machine, precisely so that visiting does not leave a trace with a third party.
For how long
Until the service opens and you have heard from us, or until you remove yourself — whichever comes first. If the project is discontinued the list is deleted. We undertake to delete the whole list if two years pass without anything opening, and would rather start afresh than keep addresses whose owners no longer remember providing them. That is a commitment we carry out, not an automated purge.
Your rights
You have the right to know what data is held about you, to have it corrected, to have it erased, to object to the processing, and to withdraw your consent at any time. Withdrawing must be as easy as giving it — hence the form below, which requires you to contact nobody.
If you are unhappy with how the data is handled, you may complain to the Swedish Authority for Privacy Protection (IMY).
Remove yourself from the list
Enter the address you signed up with. The row is deleted from the database at once. A backup may still contain it for a while before it rotates out; we never restore a withdrawn sign-up from one. For privacy reasons the form answers identically whether or not the address was on the list — otherwise it could be used to find out who is.
If it does not work, write to hej@aems.app and we will do it by hand.
Last changed 6 September 2026.