1. Data controller
fishpins — community fishing-spot map. Contact: [email protected].
2. Data we process
Account data: display name, email, password hash (bcrypt). Optional: country, city (at registration).
User content: spots you submit (name, coordinates, description), photos, flag reports.
Technical data: locale and country preference (cookies), session token (cookie), IP-based country detection (only to set the default map zoom).
External providers: if you sign in with Google, Google sends us a stable account ID, your email, and your display name.
3. What we use it for
Sign-in and account features (your own spots, your own flag reports).
Setting the default map region for you.
Moderation decisions (who submitted a spot, who flagged something).
We do not run ads, do not embed third-party trackers, do not sell data.
4. Cookies
We only use strictly necessary cookies: session, locale (horgasz_locale), country (horgasz_country). No analytics or advertising cookies.
5. Retention
Account data: until account deletion or 3 years of inactivity. Spots and photos — community content — may stay (anonymised under "Horgász") after account deletion.
6. Your rights
Access, rectification, erasure, restriction, objection, portability, withdrawal of consent. Supervisory authority: your national DPA (in Hungary: NAIH, naih.hu).
Requests: [email protected].
7. Security
Passwords are bcrypt-hashed. HTTPS for every connection. Database access is restricted to the controller.