Privacy

Last updated: 19 October 2026

Data controller

Pauhu Ltd (Business ID 0768171-8), Pohjoinen Hesperiankatu 15 A 10, 00260 Helsinki, Finland, is the data controller for pauhu.com. Contact: WhatsApp. pauhu.eu has its own privacy policy; pauhu.ai is run by Pauhu AI Ltd under its privacy policy.

What this site processes

pauhu.com is an information site with no accounts, forms or payments. Our web server keeps a standard access log of each request, including the network address and browser headers, for security and reliability (legitimate interest, GDPR Art. 6(1)(f)); the log is kept for up to 30 days. Your theme preference and your analytics choice are stored in your browser's localStorage and never leave your device.

Analytics

We use Google Analytics 4, provided by Google Ireland Limited as our processor, to measure how this site is used. Our own tag sends the page viewed, scroll depth, time on page and the hour of the visit, and for clicks, form submissions and sections viewed a label taken only from the element's own data-action, id, name or data-section attribute (a section without one is labelled by its element type). A label value that looks like an email address, a token or a long id is dropped, not sent. Addresses of pages, links and the page you came from are sent without query strings or fragments; on our own sites a page that is not on the site's list of published pages is recorded as /:other, other sites are sent as their origin only, and email and phone links as their scheme only. These limits apply to our tag's own events, not to what Google's tag collects by itself: Google Analytics also records approximate location (city level) and device type and details, and Google's enhanced measurement is switched on for this site, which records scrolls, outbound clicks (clicks on links to other sites, with the link address and link text), site search (search words carried in a page address, for example ?q=), embedded video engagement, file downloads (with the link address and link text) and form interactions (form starts and submissions, with the form name and destination). Google's user-provided data collection is also switched on: where Google's tag detects an email address or phone number on a page, it may collect it in hashed form. Email addresses detected in collected data are redacted before they are sent. Analytics cookies are set only after you choose Accept in the banner (consent, GDPR Art. 6(1)(a)); before you accept, or if you decline, no analytics cookies are stored on your device, but Google may still receive cookieless measurement pings. Your network address reaches Google when your browser loads the analytics script; Google Analytics 4 does not log or store IP addresses. Google signals, ad personalisation and Google data sharing are switched off, there are no advertising cookies and no ads, and analytics data is kept for 14 months. Google may process this data in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. Change your analytics choice.

Your rights

You may access, rectify or erase your data, restrict or object to processing, withdraw consent at any time and lodge a complaint with the Office of the Data Protection Ombudsman, Finland (tietosuoja.fi). To exercise a right, message us on WhatsApp.