Privacy Policy

1. What data we collect

When you register and use the service, we collect:

• Email address
• Name (if provided)
• Profile photo (if uploaded)
• Place collections you create
• IP address and technical session data (stored by Supabase)

2. How data is used

Data is used solely to operate the service: authentication, displaying profiles and collections. We do not sell or share your data with third parties for commercial purposes.

Legal basis for processing: contract performance (Art. 6(1)(b) GDPR).

3. Data storage

Data is stored on Supabase servers (data processor, DPA signed). Supabase stores data in compliance with GDPR.

4. Your rights

You have the right at any time to:

• Delete your account — go to "My account" and click "Delete account". All your data will be deleted immediately and permanently.
• Request a data export — email us below and we will send an export within 30 days.
• Correct your data — in "My account" you can update your name and photo.

For data-related requests: contact@spotally.com

5. Age

The service is not intended for children under 13. If you are under 16, you may need parental consent depending on your country.

6. Policy changes

For material changes we will update the date at the top of the page. Continued use of the service after changes constitutes acceptance of the updated policy.