Privacy Policy

What we collect

We collect the minimum data needed to run the service:

• Account data: email address, display name, and optional avatar (required to create an account).
• Content you create: place submissions, reviews, photos, and reports.
• Usage data: server access logs (IP address, browser type, pages visited) retained for a maximum of 30 days.

How we use it

Your data is used solely to provide and improve the service. We do not sell, rent, or share your personal information with third parties for marketing. Email addresses are used only for authentication and transactional notifications (e.g. email confirmation).

Third-party services

• Supabase — database, authentication, and file storage (EU or US region). See Supabase Privacy Policy.
• Vercel — hosting. See Vercel Privacy Policy.
• Google OAuth — optional sign-in. See Google Privacy Policy.
• hCaptcha — bot detection on forms. See hCaptcha Privacy Policy.

Your rights (GDPR)

You can delete your account at any time from Account › Settings › Delete account. This permanently removes your profile and all associated content. For data export or other GDPR requests, please contact us through the site.

Cookies

We use a single session cookie set by Supabase Auth for authentication. No advertising or analytics cookies are set.

Changes

We may update this policy. Material changes will be communicated via the site.