Privacy Policy

This Privacy Policy explains how r8myproject ("we", "us") collects, uses and protects your personal data when you use https://www.r8myproject.com (the "Service"). We are committed to complying with the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller is Martin Sailliez, an individual residing in Belgium. Contact: r8myproject@gmail.com.

Data We Collect

• Account data: when you sign in with Google, we receive your email address, name and profile picture.
• Profile data: any name or avatar you choose to add or update.
• Content: the projects you publish and the feedback ("roasts") you give or receive.
• Usage data: your activity on the Service (projects published, roasts given and received), needed to operate the platform.

How We Use Your Data

• To create and manage your account.
• To provide the Service (publishing projects, exchanging feedback).
• To show your roasts — with your public name and avatar — to the project owner and to other members who have roasted the same project.
• To operate the reputation system.
• To maintain security and prevent abuse.

Legal Basis

We process your data to perform the contract between you and us (our Terms of Service), based on your consent when you sign in, and on our legitimate interest in keeping the Service secure and functional.

Service Providers

We rely on the following processors:

• Supabase, Inc. — database and authentication. Data is stored in the European Union (Frankfurt, Germany).
• Vercel Inc. — website hosting and privacy-friendly, cookieless web analytics (aggregated traffic only, no personal profiling).
• Google LLC— authentication ("Sign in with Google").

Cookies

We only use cookies that are strictly necessary to keep you signed in (authentication session). Our analytics are cookieless and do not track you across other websites.

Data Retention

We keep your data for as long as your account is active. If you delete your account, your personal data is deleted, except where we must keep it to comply with legal obligations.

Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• request erasure of your data;
• object to or restrict certain processing;
• request portability of your data.

To exercise these rights, contact us at r8myproject@gmail.com. You also have the right to lodge a complaint with the Belgian data protection authority (CBDA — www.cnil.be).

International Transfers

Some providers (e.g. Vercel, Google) may process data outside the European Union. In such cases, transfers are governed by appropriate safeguards such as the EU Standard Contractual Clauses.

Changes

We may update this Privacy Policy. The "Last updated" date at the top reflects the latest version.