Privacy notice

Person responsible

What is stored

When you register, we process your username, display name, email address and reason for joining. The team reviews the application. The reason is deleted after the decision.

• Account: email, password hash

  PURPOSE: Sign-in

  LEGAL BASIS: Contract, Art. 6(1)(b)

  RETENTION: until deletion

• Passports, stamps, notes, photos

  PURPOSE: Travel log

  LEGAL BASIS: Contract, Art. 6(1)(b)

  RETENTION: until you delete them

• Travelynx trips

  PURPOSE: Stamps

  LEGAL BASIS: Consent, Art. 6(1)(a)

  RETENTION: until withdrawn

• IP addresses

  PURPOSE: Abuse prevention

  LEGAL BASIS: Legitimate interest, Art. 6(1)(f)

  RETENTION: After 7 days, at the next hourly cleanup

• Reports about your account

  PURPOSE: Moderation

  LEGAL BASIS: Legitimate interest, Art. 6(1)(f)

  RETENTION: 12 months after closing

Who receives data

The hosting provider processes data to run the site. The email provider receives addresses and the content of emails sent by Finlog.

If you publish a Blahaj on the Fediverse, its profile and shared posts go to other servers. Those servers process the data themselves and may keep copies.

Maps load their style and tiles from tiles.openfreemap.org. Your browser sends your IP address and browser details to that service when a map opens. Finlog does not proxy the tiles. Trip endpoint searches go from Finlog to Transitous. Place searches, including the fallback for unknown stations, go to Nominatim. Route lookups send Transitous the endpoints and trip time. These services receive the server IP and search data, without your account details.

If you connect Travelynx, Finlog exchanges the necessary account and trip data with your chosen Travelynx instance.

For posts already distributed to other servers, Finlog sends a delete request. Finlog cannot guarantee that every server carries it out.

Cookies

Finlog uses cookies for sign-in, language, time zone and an application in progress. There are no advertising or analytics cookies.

Your rights

You may request access, correction, erasure, restriction and portability of your data. You may object to processing based on legitimate interests and withdraw consent.

support@midnightthoughts.space. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).