EN · NL

Privacy Policy

Last updated: 21 June 2026

This Privacy Policy explains how AleSpot ("we", "us"), the operator of the AleSpot mobile application ("the App"), collects, uses, and protects your personal data, in accordance with the EU General Data Protection Regulation (GDPR) and Dutch data protection law.

If you have questions about this policy or your data, contact us at contact@alespot.com.

1. Who we are

AleSpot is operated by a natural person based in the Netherlands. We are the data controller for the personal data described in this policy, and can be reached at the contact details in §11.

2. What data we collect

Data	Why we collect it	Source
Email address	To create your account and log you in via a magic link (no password)	You, when you log in
Precise location	To show nearby pins, power search/filtering, and (if you opt in) home-location alerts	Your device, with your permission
Pins you submit (name, description, location, photos, links)	To publish your contribution on the map	You
Favourited/saved pins	To show your personal list and sync it across sessions	You, automatically as you use the App
Push notification device token	To deliver "new pin near you" alerts, if you opt in	Your device, via Firebase Cloud Messaging
Advertising identifiers	To show ads (non-personalised unless you consent)	Google AdMob, automatically while ads are shown
Basic technical/usage data	To keep the App working and diagnose problems	Automatically, via our servers and the services below

We do not collect payment details directly (a future "remove ads" purchase, if introduced, would be handled entirely by the Apple/Google app store, not by us).

3. Legal basis for processing

Account, pin submissions, favourites: performance of a contract with you (providing the App's core features).
Location for search/alerts: your explicit consent, given when the App requests location permission.
Push notifications: your explicit consent, given when you opt in.
Advertising: consent (for personalised ads, EEA/UK users — see §6) or our legitimate interest in funding a free app (non-personalised ads).
Security, fraud prevention, legal compliance: our legitimate interest and/or legal obligation.

4. Who we share data with

We use the following processors to operate the App. Each only receives the data necessary for its function:

Service	Purpose	Data involved
Supabase (PostgreSQL)	Database hosting	All account/app data
Cloudflare R2	Image storage (pin photos)	Submitted photos
Resend	Sending login (magic-link) emails	Email address
Google Firebase (Cloud Messaging)	Push notification delivery	Device token
Google AdMob	Showing ads	Advertising identifier, approximate location, app usage
Stadia Maps	Map tiles and address search (geocoding)	Approximate location, search queries

Some of these providers may process data outside the EU/EEA (notably Google and Resend, both US-based). Where this happens, it is covered by their respective Standard Contractual Clauses or an equivalent safeguard. We do not sell your personal data, and we do not share it with anyone for their own marketing purposes.

5. How long we keep your data

Account data and submitted pins are kept for as long as your account is active, and deleted on account deletion (see §8).
Magic-link login tokens expire after 15 minutes and are deleted shortly after use or expiry.
Push notification device tokens are removed on logout or when you disable alerts.

6. Advertising and consent (EEA/UK users)

The App shows ads via Google AdMob to support free use. Before any ads are personalised, EEA/UK users are shown a consent prompt (via Google's User Messaging Platform) where you can accept or decline personalised advertising. You can change your choice at any time in Settings. If you decline, you will still see ads, but they will not be personalised to you.

7. Your rights

Under the GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Erase your data ("right to be forgotten").
Restrict or object to certain processing.
Port your data to another service.
Withdraw consent at any time (e.g. by disabling location or notifications in Settings), without affecting processing already carried out.

To exercise any of these rights, contact us at contact@alespot.com or use the in-app account deletion option in Settings → Account. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority.

8. Deleting your account

You can permanently delete your account and associated personal data at any time from Settings → Account → Delete my account. This removes your account, login credentials, favourites, device tokens, and personal information. Pins you submitted that have already been published may remain visible (as they describe a public venue/event, not you personally), but will no longer be linked to your account.

Exception: if your account was suspended or terminated for violating our Terms of Use, we may retain the minimum data necessary (e.g. your email or an equivalent identifier) to enforce that suspension and prevent re-registration, even where you separately request deletion. This is limited to what's needed for that purpose and is covered by our legitimate interest in preventing abuse.

9. Children

The App is intended for users who have reached the legal drinking age in their country or region, and access is gated accordingly. We do not knowingly collect data from children below that age.

10. Changes to this policy

We may update this policy from time to time. Material changes will be flagged in the App. Continued use after an update means you accept the revised policy.

11. Contact

AleSpot — contact@alespot.com