Privacy Policy & Cookies

This Privacy Policy & Cookies document explains how personal data is processed and how cookies and similar technologies are used on the website in-the-city.vercel.app, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable EU privacy laws.

1. Data Controller

The controller of your personal data is:

2. Scope of Personal Data

Depending on how you use the website, we may process the following data:

• technical data (device type, operating system, browser),
• anonymized IP address,
• authentication and session data,
• account information provided voluntarily (e.g. email address),
• information submitted via forms.

We do not process special categories of personal data as defined in Article 9 GDPR.

3. Purposes of Processing

Personal data is processed for the following purposes:

• providing and maintaining the website and its functionality,
• user authentication and account management,
• communication with users,
• improving the quality and security of the service,
• compliance with legal obligations.

4. Legal Basis for Processing

Personal data is processed based on:

• the user's consent, where applicable (Article 6(1)(a) GDPR),
• performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR),
• legal obligations (Article 6(1)(c) GDPR),
• legitimate interests of the controller (Article 6(1)(f) GDPR), such as ensuring security and stability of the service.

5. Data Recipients

Personal data may be shared only with trusted service providers acting on behalf of the controller, including:

• hosting and infrastructure providers,
• IT and security service providers,
• authentication and backend service providers.

All such entities process data under data processing agreements and in accordance with applicable law.

6. Data Transfers Outside the EU

As a rule, personal data is processed within the European Union. If data is transferred outside the EU, appropriate safeguards are applied in accordance with GDPR, including standard contractual clauses.

7. Data Retention

Personal data is stored:

• for the duration of the user account,
• as long as necessary to achieve the processing purpose,
• for periods required by applicable law.

Authentication cookies expire automatically or are deleted upon logout.

8. Your Rights

Under GDPR, you have the right to:

• access your personal data,
• rectify inaccurate data,
• request deletion of data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time (where applicable),
• lodge a complaint with a supervisory authority.

To exercise your rights, please contact us at the email address provided above.

9. Cookies & Local Storage

9.1 Cookies

This website uses only strictly necessary cookies required for core functionality, such as user authentication and session management.

These cookies:

• are essential for the website to function,
• are not used for analytics, advertising, or profiling,
• are not used for tracking users across websites,
• do not require user consent under applicable EU law.

9.2 Local Storage & Session Storage

We use browser local storage and session storage solely for functional purposes, such as:

• temporary caching of user data to improve performance,
• storing short-lived data during registration or authentication flows.

This data is stored locally on the user's device and does not require a cookie consent banner. Users can clear this data at any time via browser settings.

9.3 Third-Party Authentication

When using third-party authentication providers (e.g. Google or Facebook), users are redirected to those providers' services. We do not control or have access to cookies set on third-party domains. Their use of cookies is governed by their respective privacy policies.

10. Changes to This Policy

We may update this Privacy Policy & Cookies document from time to time. The current version is always available on the website.