Privacy Policy

1. Data Collection & Authentication

We use Google OAuth for a secure and seamless login experience. By using this method, we collect:

• Your primary email address (to identify your account).
• Your full name and profile picture (to personalize your dashboard).

We do not have access to your Google password or any other private data from your Google account.

2. Service Usage Data (The Globe)

To provide our core service—the interactive 3D travel globe—we store and process:

• A list of countries you have marked as visited.
• Your chosen kugelcard.com/[username] handle.
• Privacy settings for your public profile.

3. Email Communications (Resend)

We use Resend to manage our email infrastructure. This includes:

A. Transactional Emails

Welcome messages and account updates. These are necessary for the service and do not require marketing consent.

B. Marketing Communications

If and only if you provide explicit consent in our “Welcome Consent Modal”, we will use your email to send updates about Kugelcard. You can withdraw this consent at any time via the Settings Panel.

4. Data Storage & Sub-processors

Your data is stored securely using Supabase (Database) and hosted on Vercel. Both providers comply with industry-standard security protocols. We do not sell your personal data to third parties.

5. GDPR Compliance (Your Rights)

Under the GDPR, you have the following rights:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can edit your profile via the Dashboard.
• Right to Erasure: You can request that we delete your personal data.
• Right to Object: You can opt-out of marketing at any time.

6. Contact & Legal Identity