Privacy Policy

Data controller

The data controller is NaMiasto (namias.to). Contact: privacy@namias.to

What data we collect

We record IP addresses in our database when users perform the following actions:

• leaving a reaction on a venue (Love / Recommend / Not recommended)
• submitting a tip for a venue
• voting on venue amenities
• checking in at a venue
• suggesting a new venue

The app also uses browser cookies and localStorage solely for technical purposes: remembering analytics consent and display mode preferences.

Purpose and legal basis

IP addresses are processed to prevent abuse and enforce rate limiting. The legal basis is the legitimate interest of the controller (Art. 6(1)(f) GDPR).

Visit analytics are collected by Vercel Analytics only after consent (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time via the cookie banner.

Retention period

IP addresses are retained for 90 days from the date they are recorded, after which they are automatically deleted.

Recipients

Data may be processed by the following sub-processors:

• Vercel Inc. — application hosting and analytics
• Neon Inc. — PostgreSQL database
• Google LLC — venue photo API

Data is not sold or shared with any other parties.

Your rights

You have the right to:

• access your personal data,
• rectification or erasure,
• restriction of processing,
• object to processing,
• data portability.

To exercise these rights contact privacy@namias.to. You also have the right to lodge a complaint with the Polish data protection authority (uodo.gov.pl).