A Small Flame

How we use your information

Privacy notice

Last updated 25 September 2026. This notice covers asmallflame.app, its launch list, and the redirect from smallflame.app.

Who is responsible?

Fixed Point Solutions SRL, Romania, is the controller of your personal data. For any privacy question or request, email contact@fixedpoint.software.

What you are signing up for

If you choose to join, we store your email address, when you signed up, and the wording and version of the consent you gave. We use these to keep the launch list and send you one email when A Small Flame launches on iOS. The legal basis is your consent (GDPR Article 6(1)(a)). Signing up is optional; you can browse without doing so.

This website only collects the addresses. It does not send confirmation emails or any other messages. We do not verify mailbox ownership, so please enter only your own address. We do not collect your name or ask what you would light a candle for.

Removing your address

You can remove your email here at any time, without an account or a reason. You can also email us. Withdrawal stops future use and removes your active signup. It does not affect the lawfulness of processing before withdrawal. The eventual launch email will include a withdrawal link.

Keeping the website secure

Our hosting provider processes connection data such as IP addresses, requested URLs, browser information and timestamps in access and error logs. We also temporarily store a keyed, day-specific hash of your IP address and request counts to limit automated form abuse. We do not put the raw IP address or browser details in the signup database. This limited security processing is based on our legitimate interest in protecting the website and its visitors (Article 6(1)(f)).

How long we keep data

  • Launch signups: until you withdraw, 30 days after we send the iOS launch notification, or 12 months after signup, whichever comes first. If the app is delayed beyond that period, we delete the address instead of keeping it indefinitely.
  • Form abuse counters: up to 48 hours.
  • Hosting access and error logs: DreamHost’s standard seven-day rotation; security incidents may require relevant records to be kept longer.
  • Our private recovery backups: up to seven days. Deleted addresses may remain in these restricted backups until rotation, and must not be used for messaging. A hashed deletion record is kept for eight days so withdrawals can be reapplied if a backup is restored.

Who can access it?

Authorized people at Fixed Point Solutions SRL and our hosting processor, DreamHost, LLC, have access where necessary to operate and protect the site. We do not sell or rent the list, use it for advertising, or share it with other brands. We may disclose data where legally required.

DreamHost processes data in the United States. Our use of this hosting requires an Article 28 data processing agreement and the EU Standard Contractual Clauses included in DreamHost’s customer data processing addendum, with an assessment of the transfer and appropriate safeguards. Contact us for information about the safeguards or a copy of the relevant terms. If a separate email delivery processor is chosen later, we will update this notice before using it, and use it only to deliver the notification you requested.

Your choices and rights

You may ask for access to your data, correction, erasure, restriction, or a portable copy. You may object to processing based on legitimate interests and withdraw consent at any time. We will respond within one month, subject to the GDPR’s permitted extensions, and may need proportionate information to verify a request. We do not make automated decisions about you or profile you.

You can complain to a supervisory authority, including Romania’s ANSPDCP, or the authority where you live or work in the EU/EEA.

Cookies and tracking

This website sets no cookies and uses no analytics, advertising pixels, embedded videos, or browser storage. Fonts and images are served from this site. That is why there is no cookie banner. Following an external link takes you to a separate website with its own privacy practices.

Security and changes

We use HTTPS, restricted private storage, limited access, and recovery backups. The launch list is kept outside the public website folder. No system can guarantee zero risk. We will publish material changes to this notice here and will not use your address for a new marketing purpose without a suitable legal basis and any required new consent.