Privacy Policy

FindWaldois operated by 【legal entity name and registered address】 (“we”), the data controller for the personal data described here. For any privacy question or to exercise your rights, contact us at 【privacy contact email】.

Account data — your name, email address, and a securely hashed password (or, for Google sign-in, your name and email from Google). Used to create and secure your account. Legal basis: performance of a contract.

Interest / watcher data— when you register interest in a name, the platform (X, Discord, or Telegram) and handle you provide. This is shown to other signed-in users so a name’s owner can contact you. Legal basis: performance of a contract / your submission of the data.

Technical data — your IP address is processed transiently to rate-limit sign-in attempts and prevent abuse. It is held only in memory for a short window and is not stored. Legal basis: our legitimate interest in security.

Analytics data — only if you accept analytics cookies, Google Analytics collects usage data (pages viewed, approximate location, device/browser). Legal basis: consent, which you can withdraw at any time.

Essential — a secure, http-only token cookie keeps you signed in, and a small amount of local storage holds your display name and your cookie choice. These are required for the site to function and are always on.

Analytics — Google Analytics sets _gacookies. These load only after you choose “Accept” on the cookie banner, and never before.

We use the following processors, each under a data-processing agreement:

• MongoDB Atlas — database hosting (region: 【e.g. EU (Frankfurt)】).
• 【email provider】 — sending verification emails.
• Google — sign-in (OAuth) and, with consent, Google Analytics.

We do not sell your personal data.

Some processors (for example Google) may process data outside the EEA. Where that happens, transfers are covered by 【Standard Contractual Clauses / an adequacy decision】.

We keep account data for as long as your account is active. Unverified accounts are removed after 【retention period, e.g. 30 days】. Watcher entries are kept until you remove them or delete your account. Rate-limiting data is discarded within minutes.

You have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to withdraw analytics consent at any time. To exercise any of these, contact 【privacy contact email】. You also have the right to lodge a complaint with your local data protection authority.

We may update this policy from time to time. Material changes will be reflected in the “last updated” date above.