NIEBOGUARDPrivacy policy
Version 2.0 · 2 November 2026 · English courtesy translation; the Polish version prevails.
1. Controller and contact
NieboGuard.pl, Bydgoszcz, Poland, [email protected]. We do not invent a separate legal entity or address; the controller details must be confirmed before publication.
2. What we process
- Optional account: e-mail address, display name, hashed magic-link/session tokens, account ID, creation and last-seen time, optional public profile, consents.
- Dashboard: saved objects, observations, saved places (exact GPS only with separate consent), reports, devices, notifications, sessions and settings in D1.
- Public profile: opt-in display name, slug, bio, region, XP, level and badges. E-mail, GPS, sessions, tokens and private devices are not public.
- Reports: description, category, general location, media, moderation status and an IP hash for spam limits. Reports remain user content.
- Notifications: push endpoint/keys, regions, categories and quiet hours; no marketing.
- Map/CDN: technical request logs (IP, browser, time) processed by Cloudflare and infrastructure providers.
- AI Lab/Compute: only data actively submitted after separate consent; raw audio/photos are not uploaded automatically. Participation in analysis does not automatically consent to model training.
- Android: camera, microphone, location, Bluetooth/Wi-Fi (Remote ID), notifications and sensors only when the user enables the relevant feature and grants permission. Raw media is not sent automatically.
3. Purposes and legal bases
Service delivery (Art. 6(1)(b) GDPR), security and abuse prevention (Art. 6(1)(f)), optional analytics and AI contributions (consent, Art. 6(1)(a)), and legal obligations. Withdrawing consent does not affect processing already carried out.
4. Recipients and transfers
Cloudflare (Workers, Pages, D1, KV, R2, Email), e-mail recipients’ providers, public map/tile and data sources, and AI/compute providers only where a feature is used. Cloudflare and other providers may process data outside the EEA under their safeguards. A full provider/transfer register must be completed before legal approval.
5. Retention
Accounts and dashboard data are kept while the account exists and through a limited backup period. Magic tokens expire after 10 minutes; sessions after 30 days. Reports may remain without account attribution when needed for moderation, security or legal obligations. Actual retention periods must be confirmed in docs/legal/DATA_RETENTION.md.
6. Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may complain to the Polish supervisory authority (UODO). Account export and deletion are available in the dashboard; public deletion instructions are at /usun-konto. Some data may be retained where law requires it. We do not promise deletion from already trained models if no such mechanism exists.
7. Cookies and local storage
The dashboard uses an HttpOnly session cookie, a CSRF cookie and local storage for guest data and preferences. Optional analytics is disabled until consent. The public site uses technical Cloudflare cookies/logs.
8. Security
HTTPS, hashed tokens, short-lived magic links, restricted sessions, CSRF protection, role-separated admin access and data separation. No system is fully secure; incidents are handled under applicable law.
9. Changes
We will publish the version and date. Material changes will be communicated where required. Legal review is required before this translation is treated as final.