Privacy Policy
Last updated: April 8, 2026
1. Who we are
HobbyCatalog (“we”, “us”) operates the website hobbycatalog.net. This policy explains what personal data we collect, why, and your rights under the GDPR.
2. Data we collect
- Account data: email address and authentication data.
- Content you create: catalogs, items, images, tags, ratings, and custom fields.
- Usage data: page views per item (stored anonymously in
item_seen). - Consent records: timestamps when you accepted these terms.
3. Cookies
We use strictly necessary cookies only:
- Session cookie — keeps you logged in (Supabase Auth, HTTP-only, deleted on logout).
- Cloudflare Turnstile — bot protection on the login/registration form. No tracking cookie is set; the challenge runs client-side.
No analytics, advertising, or third-party tracking cookies are used.
4. Legal basis
- Contract (Art. 6(1)(b) GDPR) — processing your account data to provide the service.
- Consent (Art. 6(1)(a) GDPR) — for acceptance of Terms and Privacy Policy at registration.
- Legitimate interest (Art. 6(1)(f) GDPR) — security (bot protection).
5. Data storage and retention
Data is stored on Supabase (EU region). Images are stored in Supabase Object Storage. Some data may be processed outside the EU by our service providers, subject to appropriate safeguards. We retain your data for as long as your account is active. You may request deletion of your account at any time (see Section 7).
6. Third-party processors
- Supabase — database, auth, and storage.
- Vercel — Next.js hosting.
- Cloudflare — Turnstile bot protection.
- Brevo — transactional email (account confirmation, password reset).
7. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and all associated data.
- Object to or restrict processing.
- Data portability.
To exercise any of these rights, email us at privacy@hobbycatalog.net.
You also have the right to lodge a complaint with your local data protection authority.
8. Contact
Questions about this policy? Contact us at privacy@hobbycatalog.net.
9. Security
We implement appropriate technical and organizational measures to protect your data, including secure authentication and encrypted connections (HTTPS).