Privacy Policy

This policy explains what personal data the Haul platform ([Naziv firme / Company name]) collects, for what purposes, on what legal basis, how long we keep it, and your rights under the GDPR.

Data we collect

• Account data: email, username, password (stored hashed).
• Profile: display name, bio, avatar, experience level, country.
• Content you submit: locations (including GPS coordinates), catches, photos, ratings, comments, listings, tournaments.
• Messages you exchange with other users.
• Technical data: IP address and device/browser data (with sessions/tokens), cookies.

Purposes and legal basis

• Providing the service and running your account — contract performance (Art. 6(1)(b)).
• Security and abuse prevention — legitimate interest (Art. 6(1)(f)).
• Marketing/newsletter — only with your consent (Art. 6(1)(a)), withdrawable anytime.
• Usage analytics — only with cookie consent.

Cookies and analytics

We use necessary cookies for login and site operation. Analytics and other non-essential cookies load only after your consent via the cookie banner. You can change your consent anytime.

Retention

• Account data: while the account is active; deleted upon erasure request.
• Sessions/tokens (IP, device): removed on expiry, at the latest 30 days after revocation.
• Backups: up to 12 months, after which deleted data is purged from them too.

Your rights

• Access, rectification and data export (Settings → “Export data”).
• Erasure of your account and data (Settings → “Delete account”).
• Withdraw consent and object to processing.
• Lodge a complaint with your supervisory authority.

Processors and transfers

We use service providers for hosting, database and authentication (e.g. Supabase) and file storage (e.g. Cloudflare R2), under appropriate data processing agreements.

Contact

To exercise your rights or ask questions: [[email protected]].

Last updated: 2026-05-28