Privacy Policy

2.1 Overview

Caparica Community respects your privacy and complies with the General Data Protection Regulation (GDPR).

This policy explains what data we collect and how we use it.

2.2 Data Controller

The data controller for Caparica Community is the individual operating this personal project. For any data-related inquiries, contact us at tomasmateo10@gmail.com.

2.3 Data Collected

We may collect:

  • Required: email address, name
  • Optional: phone number
  • Usage data: basic activity (posts, comments, contact requests, subscriptions)

2.4 How Data is Used

We use your data to:

  • Authenticate users (magic link login)
  • Enable communication between users
  • Manage posts and interactions
  • Improve the platform

2.5 Contact Sharing

Your contact information is shared only:

  • If you choose to share it directly, or
  • After you approve a contact request

We do not share your data publicly without your control.

2.6 Legal Basis (GDPR)

We process data based on:

  • Consent (e.g. contact sharing)
  • Legitimate interest (operating the platform)

2.7 Data Storage

  • Data is stored securely using third-party infrastructure
  • We take reasonable measures to protect your data

2.8 International Data Transfers

To operate the Platform we rely on third-party service providers that may process your data outside the European Economic Area (EEA), including:

  • Supabase (database and authentication — hosted on AWS)
  • Vercel (hosting and serverless functions)
  • Resend (transactional email delivery)
  • Umami (cookie-free, privacy-focused analytics)

These providers process data on our behalf and are contractually bound to protect your data in accordance with GDPR requirements, including through Standard Contractual Clauses (SCCs) where applicable.

2.9 Data Retention

We retain data:

  • As long as your account is active
  • Or as needed to operate the platform

You may request deletion at any time.

2.10 Your Rights

Under GDPR, you have the right to:

  • Access your data
  • Correct your data
  • Delete your data
  • Restrict processing
  • Object to processing
  • Data portability

To exercise these rights, contact us at tomasmateo10@gmail.com.

2.11 Third-Party Services

We may use third-party services (e.g. hosting, email providers) to operate the platform. These providers process data on our behalf.

2.12 Cookies & Analytics

The platform may use minimal cookies for:

  • Authentication
  • Session management

No tracking or marketing cookies are used.

We use Umami, a privacy-focused, cookie-free analytics tool, to understand how the platform is used (e.g. page views, feature usage). When you are signed in, we may send your account email to Umami so we can tell sessions apart in our analytics; other visitors are not identified this way. No cookies are set by analytics.

2.13 Contact

For any privacy-related requests, contact us at tomasmateo10@gmail.com.

See also our Terms & Conditions.