Privacy Policy

This Privacy Policy explains how Thinkroid Technologies Inc., which operates Attaky ("Attaky", "we", "us", "our"), collects, uses and shares personal data when you use attaky.com, Attaky Docs, Attaky Manuals, Module Configurator, Module Assembly, the Attaky Firmware Store, the Attaky Model Gallery, the Attaky Blog, Attaky Accounts, and any other service that links to this policy (together, the "Services"). We are responsible for the personal data described here. Our online store at shop.attaky.com has its own privacy policy.

We collect what we need to run the Services, keep them secure, respond to you and, where allowed, understand how the Services are used. We don't sell your personal data.

1. What we collect

Information you give us

• Attaky Account. Your email address, handle, nickname and password (stored only in a securely hashed form), and your two-step verification settings if you turn them on. If you choose to add them, your first and last name, bio, gender and birthday. These optional details are simply part of your profile; you can clear any of them at any time in your account settings.
• Content you publish. Firmware, 3D models, images, descriptions, release notes, source links and other details you add to a listing. For uploads, we also record file details, such as names and sizes, and how much storage your account uses.
• Developer applications. If you apply to publish on the Firmware Store, the reasons you give and any files you attach, such as a résumé or portfolio.
• Reports. If you report content, the reason you choose and any note you add.
• Messages. If you use the contact form, your email address and message (required) and, if you add them, your name and a subject. If you email us, what you send.

Information collected automatically

• Sign-in and security data. When you sign in, we record information such as your IP address, browser and device, the time, and whether the attempt succeeded, and we keep track of your active sessions. We also keep records of security, moderation and administrative actions.
• Technical data. Like most websites, we process standard technical information, such as your IP address, browser type, pages requested and the time of the request, to deliver the Services and keep them secure.
• Bot protection. Some forms run an automated check that processes technical information about your browser and connection to tell people from bots.
• Measurement. See section 5.

We collect personal data from you and your device; we don't buy it from others. Please don't include sensitive information, such as health information or government identification numbers, in your content or messages. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

2. How we use it

We use your information to:

• run your account and sign you in to the Services;
• host and show the content you publish;
• review developer applications and content, and handle reports;
• protect accounts and the Services from fraud, abuse and attacks;
• send service emails, such as address verification, password resets and notices about your account or content;
• reply to your messages;
• understand how the Services are used and how our campaigns perform; and
• comply with the law and enforce our Terms.

Where the law requires a legal basis, we rely on providing the Services you asked for, our legitimate interests in operating, securing and improving the Services, your consent for measurement where consent is required, and our legal obligations.

You need to give us an email address, a handle, a nickname and a password to create an account. Without them we can't provide one. Everything else in your profile is optional.

3. Signing in across Attaky services

When you use your Attaky Account to sign in to an Attaky service, that service receives only the account details it needs, such as an account identifier, your handle and nickname and, on some services, your email address and bio. A service may refresh these details when you next sign in to it or when it receives an update from your account. Your password is never shared with other services.

4. What others can see

Your handle and nickname, and the content you publish, may be visible to anyone. Your bio may be shown where a service displays profiles. We don't publish your email address. When you report content, we don't show your identity to the person who published it.

5. Cookies and measurement

Essential cookies and similar technologies keep you signed in, protect forms, and remember your choices, such as your cookie preferences and display theme. The Services need them to work, so they can't be switched off.

Measurement. On some of the Services we use an analytics service to understand how visitors find and use our websites and how our campaigns perform. If you are in the European Economic Area or the United Kingdom, or if we can't tell where you are, measurement stays off unless you allow it. In other regions it may be on by default. Wherever you are, you can turn it on or off at any time with Cookie settings on this page, or on those of our websites that show it. Your choice is shared by our websites that use measurement, and turning it off doesn't affect your access to the Services.

6. Who we share it with

We don't sell your personal data. We share it only:

• with service providers that help us run the Services, such as providers of hosting and infrastructure, content delivery and security, bot protection, file storage, email delivery and analytics, who may use it only to provide their services to us or as their terms with us allow;
• with other users, as described in section 4;
• when required by law, or when we believe in good faith it is needed to protect the rights, safety or security of our users, the public or Attaky;
• as part of a business transfer, such as a merger, acquisition or sale of assets, in which case this policy continues to apply to your data; and
• with your consent.

7. Where your data is processed

We are based in Canada. Our service providers process data in Canada, the United States, the European Union and other countries where they operate, where data-protection laws may differ from those where you live. Where the law requires it, we take steps to protect data transferred internationally. You can contact us for more information.

8. How long we keep it

We keep personal data only as long as we need it for the purposes described in this policy, and then delete or de-identify it. In particular:

• Account data is kept while your account exists. After we process a request to delete your account, we delete or de-identify it within a reasonable time. We may keep limited information where we need it for security, abuse prevention, disputes or legal reasons.
• Sign-in and security records are kept for a limited period and then deleted.
• Content you publish stays on the Services until you or we remove it, and may remain after your account is deleted. We can't remove copies that others have already downloaded.
• Developer applications, reports and messages are kept as long as needed to handle them and to keep reasonable records.
• Measurement data and consent records are kept only as long as reasonably needed.

9. How we protect it

We use reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access. No method of sending or storing data is completely secure, so please use a strong, unique password and turn on two-step verification.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, or to receive a copy of it. You can do much of this yourself in your account settings: edit or clear your profile details, sign out of sessions, or request deletion of your account. Where we rely on your consent, you can withdraw it at any time, for measurement through Cookie settings, without affecting anything we did before. For anything else, contact us through our contact page. We may need to confirm your identity before acting on a request.

You may also complain to a data-protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for British Columbia. Elsewhere, it is your local data-protection authority.

11. Children

The Services are not directed to children and are not intended for anyone under 16. We don't knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

12. California residents

If you are a California resident, you may have the right to know, correct or delete personal information we hold about you, and to opt out of certain uses of it. We don't sell personal information. You can turn off measurement at any time with Cookie settings. We won't treat you differently for exercising these rights.

13. Changes to this policy

We may update this policy as the Services change. We will post the updated policy here with a new "last updated" date and give any additional notice required by law.

14. Contact

Thinkroid Technologies Inc.
Vancouver, British Columbia, Canada
For privacy questions or requests, contact us through our contact page.