Privacy Policy
1. Controller
Giannis Papadopoulos, Stuttgarter Straße 20, 71229 Leonberg, Germany. Contact: teofilos19951@gmail.com. Full details: Impressum.
2. Hosting and infrastructure
The site is hosted on Lovable Cloud infrastructure (application hosting on a Cloudflare edge runtime, database, authentication and object storage provided by Supabase). These providers act as processors under Art. 28 GDPR. Technical server and platform logs (IP address, timestamp, requested URL, user agent, error traces) are generated by these providers for security, abuse prevention and troubleshooting on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and are retained for a short period defined by the provider (typically up to 30 days).
3. Evidence uploads (/submit)
We store what you enter in the form:
- ▸Alias / call-sign (free text — please do not enter your real name)
- ▸Encounter location and date of event (free text)
- ▸Description of the anomaly
- ▸The uploaded file plus its name, size and MIME type
- ▸Automatically derived data: archive ID, category, tags, cluster, title and summary
- ▸Your content notice (fiction/theory or claimed authentic) and your rights confirmation
- ▸Timestamp and moderation status
Legal basis: Art. 6(1)(a) and (b) GDPR (you deliberately submit content for publication) and Art. 6(1)(f) GDPR (operating and moderating the archive). Uploaded files are stored in a private bucket; public links are short-lived signed URLs. Entries are retained until you request deletion or we remove them. Note that files can contain embedded metadata (e.g. EXIF/GPS) — remove it before uploading if you do not want to share it.
4. Anonymous chat
Messages you post in the chat lounge are stored with the alias you choose and a timestamp, and are publicly readable for 24 hours. Legal basis: Art. 6(1)(f) GDPR (community feature). Do not post personal data in the chat.
5. Newsletter ("Encrypted Briefing")
The briefing form is currently a display element and does not yet dispatch a newsletter. If and when it goes live, we will collect your e-mail address, use a double opt-in procedure, log the confirmation for proof, process it on the basis of your consent (Art. 6(1)(a) GDPR), and let you unsubscribe at any time via a link in every message.
6. Content reports (/report)
When you report content we store your e-mail address, optional name, the reason, your description and the referenced entry. Legal basis: Art. 6(1)(c) and (f) GDPR (statutory notice-and-action duties under the Digital Services Act and defending against legal claims). Reports are kept for as long as needed to process them and to document the decision, typically up to 3 years.
7. Cookies, local storage and analytics
We do not use tracking or advertising cookies. The site stores your effect and audio preferences in your browser's local storage; this is strictly necessary for the function you switched on and never leaves your device. Advertising slots on the site are currently placeholders. Before any real advertising, affiliate or analytics provider is activated, this policy will be updated and a consent banner will be introduced.
8. Recipients
Data is disclosed to our hosting and infrastructure processors, and to authorities or rights holders where we are legally obliged or entitled to do so. Processing may involve transfers to third countries on the basis of EU standard contractual clauses.
9. Your rights
- ▸Access (Art. 15), rectification (Art. 16), erasure (Art. 17) and restriction (Art. 18)
- ▸Data portability (Art. 20)
- ▸Objection to processing based on legitimate interest (Art. 21)
- ▸Withdrawal of consent at any time with effect for the future (Art. 7(3))
- ▸Complaint to a supervisory authority (Art. 77)
To exercise a right, write to teofilos19951@gmail.com. If you want an entry deleted, include its archive ID.
Last updated · 2026-07-30