Privacy Policy

This Privacy Policy explains how r8myproject ("we", "us") collects, uses and protects your personal data when you use https://www.r8myproject.com (the "Service"). We are committed to complying with the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller is Martin Sailliez, an individual residing in France. Contact: martinsailliez@gmail.com.

Data We Collect

• Account data: when you sign in with Google, we receive your email address, name and profile picture.
• Profile data: any name or avatar you choose to add or update.
• Content: the projects you publish and the feedback ("roasts") you give or receive.
• Usage data: your roast balance and related transactions, needed to operate the credit system.

How We Use Your Data

• To create and manage your account.
• To provide the Service (publishing projects, exchanging feedback).
• To operate the roast/credit economy.
• To maintain security and prevent abuse.

Legal Basis

We process your data to perform the contract between you and us (our Terms of Service), based on your consent when you sign in, and on our legitimate interest in keeping the Service secure and functional.

Service Providers

We rely on the following processors:

• Supabase, Inc. — database and authentication. Data is stored in the European Union (Frankfurt, Germany).
• Vercel Inc. — website hosting and privacy-friendly, cookieless web analytics (aggregated traffic only, no personal profiling).
• Google LLC— authentication ("Sign in with Google").

Cookies

We only use cookies that are strictly necessary to keep you signed in (authentication session). Our analytics are cookieless and do not track you across other websites.

Data Retention

We keep your data for as long as your account is active. If you delete your account, your personal data is deleted, except where we must keep it to comply with legal obligations.

Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• request erasure of your data;
• object to or restrict certain processing;
• request portability of your data.

To exercise these rights, contact us at martinsailliez@gmail.com. You also have the right to lodge a complaint with the French data protection authority (CNIL — www.cnil.fr).

International Transfers

Some providers (e.g. Vercel, Google) may process data outside the European Union. In such cases, transfers are governed by appropriate safeguards such as the EU Standard Contractual Clauses.

Changes

We may update this Privacy Policy. The "Last updated" date at the top reflects the latest version.