Privacy Policy

1. Data Controller

The controller responsible for the personal data collected through SpareSpot is: Arthur Cousin, based in Switzerland, reachable at contact@sparespot.ch.

2. Data Collected

We only collect data strictly necessary for the operation of the service. When using SpareSpot, we collect the following data:

• Email address
• Chosen display name
• Listings created (title, description, price, photos, full address — shown to confirmed booking parties only; approximate location shown publicly)
• Messages exchanged between users
• IP address, session data, and application error reports (automatically collected by Supabase Auth and Sentry)

3. Purposes and Legal Basis

• Performance of contract — account management, listing publication and display, messaging between users.
• Legitimate interest — platform security, fraud prevention, abuse prevention, and anonymous usage analytics (Google Analytics, cookieless mode — no _ga or _gid cookies are set).
• Consent — use of strictly necessary cookies for the service to function.

4. Retention Period

• Account data and listings — retained until the account is deleted by the user.
• Messages — retained until the account is deleted.
• System logs (authentication, requests) — maximum 30 days.
• Sentry error reports — maximum 90 days.

Deleted data may persist in encrypted backups for up to 30 days before being permanently purged.

5. Sub-processors

SpareSpot uses third-party service providers to operate the platform. Where a provider is established outside Switzerland or the EEA, the applicable transfer safeguard is noted in the table below:

6. Rights of Data Subjects

Under applicable law, you have the following rights: right of access, rectification, erasure (delete your account in Settings), portability, restriction of processing, objection, and withdrawal of consent.

To exercise your rights, contact us at contact@sparespot.ch. We will respond within 30 days.

You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or the supervisory authority in your country of residence within the European Union.

7. Cookies

SpareSpot uses cookies strictly necessary for the service to function (authentication sessions). Google Analytics is loaded in cookieless mode (storage: none, client_storage: none), so no _ga or _gid cookies are set; only anonymised aggregate page-view data is sent to Google. Vercel Speed Insights collects anonymous performance metrics. No advertising cookies are used.

8. Governing Law

This policy is governed by the Swiss Federal Act on Data Protection (nFADP) of 25 September 2020. For users in the European Union, the General Data Protection Regulation (GDPR) also applies.

9. Amendments

Any changes to this policy will be published on this page. For material changes, we will notify registered users by email. Last updated: May 2025.