Privacy policy

Data controller

The party named in our Impressum is responsible for data processing on this website.

What we process

ReDisc only processes data that's actually needed to run the service:

• Account: email address and password (managed via our processor, Supabase), plus a technically required session cookie to keep you signed in.
• Profile (optional): display name, ReDisc handle, avatar photo, bio, home town, home course, first-played date, UDisc username.
• Your disc collection: name, photo, color, weight, condition, notes, and purchase price per disc. Private to you by default.
• Public disc pages:if you mark a disc "public", its name, photo, and manufacturer/mold details become visible to anyone who scans its QR code or opens its link. Your email address and phone number are never shown directly.
• Finder contact form:if someone reaches out via a public disc page (no account required on their end), we permanently store their name, the contact info they provided, and their message in that disc's history (visible only to you, the owner), and forward it to you by email.
• Ownership transfers: transferring a disc sends an email with an acceptance link to the address you provide.

Recipients and processors

• Supabase — database, authentication, and file storage (photos). [Add the server location/region of the Supabase project in use.]
• Resend— sends transactional email (found-disc notifications, transfer invites, login confirmations). [Add the provider's location and legal basis for any non-EU transfer, if applicable.]
• Server hosting — the application server ReDisc runs on is hosted by Contabo GmbH. [Add the exact data center location of the server.]

Cookies

We only use strictly necessary cookies for your login session (set by Supabase Auth). No tracking, analytics, or marketing cookies are used.

Retention and deletion

We keep your data for as long as your account exists. Self-service account deletion isn't available in the app yet — email us at the address in our Impressum and we'll delete your data manually.

Your rights

You have the right to access, correct, delete, and restrict processing of your data, as well as data portability and objection. You may also lodge a complaint with a data protection supervisory authority.

Minors

ReDisc is not directed at children under 16.

Changes to this policy

We'll update this policy as ReDisc's feature set changes.

Note: this page is a draft grounded in how the app actually works today. The remaining placeholders need filling in, and the text should get a legal review before going live.