Privacy Policy

1. Controller

2. What we process

• Account data: email, hashed password, username, display name, avatar, optional Google ID
• Session cookie (ff.sid): keeps you logged in (~14 days)
• Location data: coordinates for saved spots, mushroom finds, weather alerts
• Community content: photos, notes, comments, votes, friend connections, chat messages
• Push notifications: Web Push subscription keys (with your consent)
• Emails: welcome, password reset, optional weather alerts, feedback replies
• Device storage: language, disclaimer acceptance, UI preferences (localStorage/sessionStorage/IndexedDB for chat gallery)

We do not use third-party analytics trackers (no Google Analytics, Matomo, etc.).

No automated decision-making with legal or similarly significant effects (Art. 22 GDPR).

3. Purposes & legal bases

Processing is based on contract performance (Art. 6(1)(b) GDPR), consent where required (e.g. push, Google sign-in, sensitive content unlock), and legitimate interests (security, service operation).

4. Recipients

• Hetzner — hosting & infrastructure (processor agreement required)
• SMTP mail — transactional emails from noreply@fungifind.org
• Let's Encrypt — TLS certificates
• Open-Meteo — weather forecasts (coordinates sent, no account data)
• Wikimedia Commons — reference species images
• Google (optional) — OAuth sign-in and user-initiated Google Lens
• cdnjs / map tile providers — delivery of libraries and map tiles

5. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact kontakt@fungifind.org.

You may lodge a complaint with the Austrian Data Protection Authority (DSB): www.dsb.gv.at

6. Sensitive & psychoactive content

Educational distribution data for psychoactive species requires age confirmation (18+) and acknowledgment of legal risks before unlock.

Version: June 2026. Full details: German Datenschutzerklärung. ES/IT/FR translations to follow.