Privacy Policy

This Privacy Policy explains how r8myproject ("we", "us") collects, uses and protects your personal data when you use https://www.r8myproject.com (the "Service"). We are committed to complying with the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller is Martin Sailliez, an individual residing in Belgium. Contact: r8myproject@gmail.com.

Data We Collect

• Account data: when you sign in with Google, we receive your email address, name and profile picture.
• Profile data: any name or avatar you choose to add or update.
• Content: the projects you publish and the feedback ("roasts") you give or receive.
• Usage data: your activity on the Service (projects published, roasts given and received), needed to operate the platform.

How We Use Your Data

• To create and manage your account.
• To provide the Service (publishing projects, exchanging feedback).
• To show your roasts — with your public name and avatar — to the project owner and to other members who have roasted the same project.
• To operate the reputation system.
• To maintain security and prevent abuse.

Legal Basis

We process your data to perform the contract between you and us (our Terms of Service), based on your consent when you sign in, and on our legitimate interest in keeping the Service secure and functional.

Service Providers

We rely on the following processors:

• Supabase, Inc. — database and authentication. Data is stored in the European Union (Frankfurt, Germany).
• Vercel Inc. — website hosting and privacy-friendly, cookieless web analytics (aggregated traffic only, no personal profiling).
• Google LLC— authentication ("Sign in with Google").

Cookies and Local Storage

We only use cookies that are strictly necessary to keep you signed in (your authentication session, set by Supabase). We do not use advertising or third-party tracking cookies. Our analytics provider (Vercel Analytics) uses a cookieless script: it does not set a cookie to identify you, and does not track you across other websites.

We also store one small value in your browser's local storage to remember that you have already seen our welcome message. It contains no personal data and is not used for tracking or profiling.

Data Retention

We keep your data for as long as your account is active. If you delete your account, your personal data is deleted, except where we must keep it to comply with legal obligations.

Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• request erasure of your data;
• object to or restrict certain processing;
• request portability of your data.

To exercise these rights, contact us at r8myproject@gmail.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, www.autoriteprotectiondonnees.be).

International Transfers

Some providers (e.g. Vercel, Google) may process data outside the European Union. In such cases, transfers are governed by appropriate safeguards such as the EU Standard Contractual Clauses.

Changes

We may update this Privacy Policy. The "Last updated" date at the top reflects the latest version.