Privacy Policy

• Account data – Email address, display name, profile picture (on registration)
• Media content – Photos and videos you upload, including EXIF metadata (date, time)
• Usage data – Game scores, votes, group memberships
• Technical data – IP address, browser type, device type (for security and operations)

We process your data solely to provide and improve our service: account management, photo storage and display, game features, and group management.

Processing is based on: contract performance (Art. 6(1)(b) GDPR) for service provision, and legitimate interest (Art. 6(1)(f) GDPR) for security and operations.

We use the following third-party services:

• Supabase (EU) – Authentication and database. Your account and usage data are stored here.
• Cloudflare R2 – Storage of your photos and videos on Cloudflare infrastructure.
• Vercel – Web application hosting. Technical data is processed for page delivery.
• Lemon Squeezy – Payment processing for paid plans as merchant of record. Payment data such as name, billing address and payment method is handled exclusively by Lemon Squeezy; we never receive full payment details.
• Google Ireland Ltd. – Google Analytics 4 for audience measurement and Google Ads conversion tracking. Only after your consent via the cookie banner. Data may be transferred to Google LLC in the USA (basis: EU-US Data Privacy Framework).
• Sentry – Error and stability monitoring. Collects technical error data as well as browser and device type; your IP address is not transmitted. If an error occurs, the affected session is recorded so the error can be reproduced; text is masked and images and videos are blocked. Sessions without errors are not recorded. Processed on servers in the EU (Germany).
• Resend – Sending emails, such as replies to contact requests and notifications about your account. Processes your email address and the content of the respective message.

We distinguish between two types of cookies and comparable storage technologies:

• Strictly necessary – Authentication, session management, language preference and storing your cookie choice. These are required to operate the service and are set without separate consent (Art. 6(1)(f) GDPR).
• Analytics and marketing – Google Analytics 4 and Google Ads conversion tracking. These are loaded only after your explicit consent via our cookie banner (Art. 6(1)(a) GDPR). Your IP address is truncated. If you decline, these services are not loaded and no data is transmitted to Google.

Your cookie choice is stored locally in your browser. You can withdraw it at any time by clearing this site’s data in your browser settings. You will then be asked again on your next visit.

Your data is stored as long as your account is active. After account deletion, all personal data, photos, and videos are permanently deleted within 30 days.

Under the GDPR, you have the following rights:

• Access – You can request information about your stored data.
• Rectification – You can have incorrect data corrected.
• Erasure – You can request deletion of your data.
• Objection – You can object to the processing of your data.
• Data portability – You can receive your data in a common format.
• Complaint – You have the right to file a complaint with the Austrian Data Protection Authority.

We reserve the right to update this privacy policy to reflect changes in legal requirements or our service.