Privacy policy

Controller

Data processed

We process account and contact data, company and location details, submitted posts and reports, and necessary security data such as truncated or hashed IP, session and browser attributes. Passwords are stored only as hashes.

Purposes and legal bases

Processing supports registration, contract performance, moderation, system security and legal obligations under GDPR Article 6(1)(b), (c) and (f), and consent under (a) where required.

Providers and international transfers

The application is hosted by DigitalOcean. Transactional email is delivered by Resend. Stripe processes payments, tax details and invoices. After consent, Google Analytics is provided by Google Ireland Limited. These providers may process data in the United States; appropriate safeguards are used for international transfers.

External media

Content from YouTube, TikTok, Instagram or Facebook loads only after a deliberate user action. The provider’s own privacy rules then also apply.

Usage analytics

Google Analytics is used only on public pages and only after your consent. Page views and technical device, browser and usage data may be processed. Query parameters are not transmitted; advertising signals and ad personalisation are disabled. The legal basis is GDPR Article 6(1)(a). Consent can be withdrawn at any time through “Analytics settings” in the footer.

Retention and cookies

Verification links expire after 24 hours and sessions generally after 30 days. Subject to legal retention duties, deletion requests are processed within 90 days. We use essential session cookies and local PWA storage. Analytics technologies are activated only after consent; we do not use advertising cookies.

Your rights

You may request access, correction, erasure, restriction, portability or object, and may complain to a data protection authority. Contact: info@tags.world.