PostPlace Privacy Policy

Effective date: April 23, 2026

This Privacy Policy explains how PostPlace ("we", "us", "our") collects, uses, and protects your information when you use PostPlace services, including postplace.app, related subdomains, staging environments, and future mobile applications (collectively, the "Service").

1. Data Controller

PostPlace is the data controller for personal data processed through the Service.

Country of establishment/residence: Slovenia
Contact emails: admin@postplace.app, data@postplace.app, abuse@postplace.app

2. Who This Policy Applies To

This policy applies to users globally.

The Service is intended for users who are 16 years of age or older.

3. Information We Collect

We collect information you provide and information generated when you use the Service.

• Account and profile information
• Content and interactions on the platform
• Technical and usage information required to run and secure the Service
• Analytics information (when enabled under the consent rules below)

Authentication and session management are provided through Supabase.

4. How We Use Information

We use information to:

• Provide and maintain the Service
• Authenticate users and secure accounts
• Enable core features (posting, commenting, voting, profiles, media)
• Provide optional machine translations of public post and comment text
• Improve reliability, performance, and user experience
• Detect abuse, fraud, and policy violations
• Comply with legal obligations

5. Legal Bases (GDPR)

Where GDPR applies, we process personal data under:

• Contract: to provide the Service you requested
• Legitimate interests: security, abuse prevention, moderation, and service improvement
• Consent: analytics and related tracking where required

6. Cookies and Similar Technologies

We use only the cookies and storage mechanisms needed for core functionality and analytics.

Essential cookies (always active)

These are required for login/session continuity and security, including Supabase-related authentication cookies. Without these, the Service cannot function properly.

Analytics cookies/identifiers (PostHog)

We use PostHog analytics.

• In regions where consent is legally required, analytics are enabled only after consent.
• In other regions, analytics may be enabled by default.
• You can choose "Essential only" where the consent banner is shown.

Cookie preference storage

Your cookie preference is stored locally in your browser (local storage key: postplace_cookie_consent) so your choice can be remembered.

7. IP Address and Location Processing

We may process your IP address temporarily to determine your approximate location (country) and security context (for example, VPN/proxy/Tor/relay detection).

The IP address itself is not stored in our application database for this feature.

8. Media Uploads

User-uploaded media is stored using Backblaze B2.

If media is referenced by content, it may remain accessible through its URL. Media may be stored indefinitely unless deletion is requested or required by policy/law.

9. Data Sharing and Service Providers

We use the following providers to operate the Service:

• Supabase (authentication/session)
• Vercel (frontend hosting)
• Railway (backend hosting)
• Backblaze (media/object storage)
• ZeptoMail (email delivery)
• PostHog (analytics)
• Langbly (machine translation)

We may disclose information when required by law, regulation, legal process, or to protect rights, safety, and platform security.

10. Retention

We retain data for limited periods based on purpose:

• Account/profile data after deletion request: 30 days
• Posts/comments/votes after account deletion: 30 days
• Moderation/report records: 6 months
• Server/security logs: 30 days
• Analytics events (PostHog): 6 months

11. Your Privacy Rights

Depending on your location, you may have rights to access, correct, export, delete, restrict, object to processing, data portability, and to lodge a complaint with a competent authority.

Currently, privacy requests are handled by email only:

data@postplace.app

To verify requests, we may ask you to confirm from the email associated with your account.

We aim to respond within 30 days.

12. International Use

The Service is available globally. Data may be processed in countries other than your own, including where our providers operate.

13. Security

We use reasonable technical and organizational measures to protect information, including encrypted connections, authentication controls, and access restrictions. No system can be guaranteed 100% secure.

14. Governing Law

This Privacy Policy is governed by the laws of Slovenia.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.

16. Contact

For privacy questions or requests:

• admin@postplace.app
• data@postplace.app
• abuse@postplace.app