Privacy Policy

Last updated: May 2, 2025

This Privacy Policy explains what personal data is collected, how it is used, and your rights in accordance with the EU General Data Protection Regulation (GDPR).

What Personal Data Is Collected

• Email address (required for account creation)
• Password (securely hashed)
• Username / Display name
• Profile picture (if uploaded)
• User-created collections, including names, uploaded images, and captions.

Public profiles can be viewed without registering. Creating an account is required only to create your own profile.

Purpose and Legal Basis

Your data is processed for the following purposes:

• To provide access to user accounts and collections.
• To store user-generated content.
• To display public profiles and collections.

The legal basis is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(a) GDPR (your consent).

Cookies

We use essential cookies only to maintain your login session. These cookies:

• Are strictly necessary for authentication.
• Do not track your behavior
• Expire after 1 year or when logging out.

Hosting and Data Storage

• Hosted on a private Netcup server (Germany).
• DNS and security via Cloudflare.

Data Sharing

We do not sell or rent your data. Third-party access is only when:

• Required by law
• Necessary for core functionality (Cloudflare).

Your Rights

Under GDPR, you have the right to:

• Access your personal data.
• Correct or delete your data.
• Withdraw consent at any time.
• File a complaint with a data protection authority.

To exercise these rights, contact: mail@nszo.net

Data Controller

Data controller responsible for this website is: see Legal Notice

Changes to This Policy

We may update this Privacy Policy. The latest version is always available here.