Privacy Policy
This document is a good-faith draft and is not legal advice. Sections marked [LAWYER TODO] require review by a qualified professional before public launch.
Who we are
NoiZ is a cashless festival platform. This website is the web companion of the NoiZ mobile app and shares the same account.
The data controller is NoiZ [LAWYER TODO] (legal entity, registered address and contact of the Data Protection Officer to be confirmed).
What we collect
Account data: your email address and, optionally, your name, username, city, bio and avatar.
Activity synced from the mobile app and shown read-only on the web: wallet balance, loyalty points, transactions, festival check-ins and badges.
Technical data strictly necessary to operate the site: language preference and a secure session cookie.
Why we use it
To provide your account, display your wallet and profile, show which friends are at a festival, and keep the catalogue up to date.
Legal basis: performance of our service (the account you create) and, for optional analytics, your consent.
Who we share it with
Hosting and database: Supabase. Maps: Mapbox (loaded only when a map is displayed). Festival and artist information is aggregated from public sources.
We never sell your personal data. [LAWYER TODO]: confirm the full list of sub-processors and international transfer safeguards.
Retention
We keep account data while your account is active. [LAWYER TODO]: confirm exact retention periods per data category.
Your rights
Under the GDPR you can access, correct, export or delete your data, and object to or restrict certain processing.
To exercise these rights, contact us [LAWYER TODO] (privacy contact email). You may also lodge a complaint with your local data protection authority.