Privacy Policy

1. Data controller

Nino Alexander Brehmer — contact details as in the Legal Notice.

2. What data we process

• Account: email address (login via magic link, no password), managed through our processor Supabase Inc.
• Profile: display name, optional profile picture, role flags (Verified Hardmaxxer/VIP)
• User content: comments, cases, forum posts, direct messages, uploaded attachments (images), each including a timestamp
• Payment data (VIP subscription): not processed by us, but directly by our payment processor Stripe — we only see whether a payment succeeded

3. Purpose and legal basis

Providing the platform and its features (Art. 6(1)(b) GDPR, contract performance), VIP billing (lit. b), security/abuse prevention (lit. f, legitimate interest).

4. Data processors

• Supabase Inc. (database, auth, file storage)
• Stripe (VIP subscription payment processing)
• Vercel Inc. (hosting)

Each of these needs a data processing agreement (DPA) — available in the respective Supabase/Stripe dashboard.

5. Retention period

Account and content data until the user deletes their account or requests deletion; deleted afterward unless a legal retention obligation applies (e.g. invoice data).

6. Your rights

Access, rectification, erasure, restriction of processing, data portability, and objection under Art. 15–21 GDPR — requests go to the contact email in the Legal Notice. You also have the right to lodge a complaint with the competent data protection authority.