Introduction

This privacy policy describes how [Your name or company] ("we", "us", "our") collects, uses, and protects your information when you use this website and related services. We are the data controller for the personal data we process in connection with this service.

By using this service, you agree to the practices described in this policy. If you do not agree, please do not use the service.

Data we collect

We collect and process the following categories of data:

• Usage and analytics data — how you use the site (e.g. pages visited, actions taken), to improve the product.
• Error and performance data — technical information when something goes wrong (e.g. errors, stack traces), to fix bugs and improve stability.
• Technical and log data — IP address, device and browser information, request metadata, to deliver and secure the service.
• Account and submission data — if you create an account or submit content, we store what you provide so we can provide the service (e.g. via our backend and database).

Third-party services

We use the following third-party services. Each may collect and process data as described below and in their own privacy policies.

Sentry

We use Sentry for error and performance monitoring. Sentry may receive:

• Stack traces and error messages
• Release and environment information
• Device and browser details
• IP address
• Any user context or breadcrumbs we send with error reports

Data is processed by Sentry (in the US or EU depending on configuration). For more details, see Sentry's privacy policy.

PostHog

We use PostHog for product analytics (and optionally session recording and feature flags). PostHog may receive:

• Events and page views
• Device and browser information
• IP address
• Identifiers (e.g. distinct_id) for analytics

Data is processed by PostHog (US or EU hosting depending on our configuration). For more details, see PostHog's privacy policy.

Cloudflare

We use Cloudflare for content delivery, security, and performance (and optional analytics). Cloudflare may receive:

• IP address
• Request and response metadata
• Logs and, if enabled, analytics data

Data is processed by Cloudflare on their global network. For more details, see Cloudflare's privacy policy.

Convex

We use Convex as our backend and database. Convex stores and processes:

• Whatever data the application stores (e.g. user accounts, submissions, preferences)

Data is stored and processed by Convex. For more details, see Convex's privacy policy.

Legal basis (EU users)

Where applicable (e.g. if you are in the European Economic Area), we process your data on the following bases:

• Contract — to provide the service you use (e.g. account and submission data).
• Legitimate interest — for error monitoring, security, and performance (e.g. Sentry, Cloudflare), where balanced against your rights.
• Consent — for optional analytics or non-essential cookies where we ask for your consent; you may withdraw consent at any time.

Retention

We keep your data only as long as needed for the purposes above or as required by law. Retention for third-party services follows their respective policies (see links above). We may retain some data longer where necessary for legal, security, or audit purposes.

Your rights

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data
• Portability — request a copy of your data in a structured, machine-readable format
• Opt-out — opt out of analytics or non-essential cookies (e.g. via PostHog or browser settings)
• Object or restrict processing — object to or request restriction of certain processing
• Complain — lodge a complaint with a supervisory authority (e.g. in the EU)

To exercise these rights, contact us using the details in the "Contact" section below.

Cookies and similar technologies

We may use cookies and similar technologies (e.g. local storage) for:

• Essential operation — sessions, security, and basic functionality
• Analytics — e.g. PostHog, to understand how the service is used

Where analytics or non-essential cookies require consent, we will obtain it and allow you to opt out. You can also manage cookies via your browser settings.

International transfers

Your data may be processed in the United States or other countries where our service providers operate. Where required by law (e.g. for transfers from the EEA), we and our providers use appropriate safeguards such as standard contractual clauses (SCCs) to protect your data.

Changes to this policy

We may update this privacy policy from time to time. We will post the updated version on this page and update the "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy. For material changes, we may provide additional notice (e.g. on the site or by email where we have it).

Last updated: [Date]

Contact

If you have questions about this privacy policy or want to exercise your rights, contact us at legal@fly-n.nl.