Privacy Policy

Data controller

The data controller is NaMiasto (namias.to). Contact: privacy@namias.to

What data we collect

We record IP addresses in our database when users perform the following actions:

• leaving a reaction on a venue (Love / Recommend / Not recommended)
• submitting a tip for a venue
• voting on venue amenities
• checking in at a venue
• suggesting a new venue

The app uses localStorage for technical purposes: remembering the choice made in the banner, display mode preferences, a session identifier, and local reactions to venues. sessionStorage remembers the return path to the map. Vercel Web Analytics and Speed Insights operate without cookies.

Purpose and legal basis

IP addresses are processed to prevent abuse and enforce rate limiting. The legal basis is the legitimate interest of the controller (Art. 6(1)(f) GDPR).

Anonymous, aggregated visit statistics are collected by Vercel Web Analytics, while anonymous performance data is collected by Vercel Speed Insights. These tools do not use cookies or track users across websites. We currently collect no custom marketing events; adding them would require a separate review and consent. The legal basis for basic measurement is the controller's legitimate interest (Art. 6(1)(f) GDPR), taking its anonymous and aggregated nature into account.

Retention period

IP addresses are retained for 90 days from the date they are recorded, after which they are automatically deleted.

Recipients

Data may be processed by the following sub-processors:

• Vercel Inc. — application hosting and analytics
• Neon Inc. — PostgreSQL database
• Google LLC — venue photo API

Data is not sold or shared with any other parties.

Your rights

You have the right to:

• access your personal data,
• rectification or erasure,
• restriction of processing,
• object to processing,
• data portability.

To exercise these rights contact privacy@namias.to. You also have the right to lodge a complaint with the Polish data protection authority (uodo.gov.pl).