Privacy Policy

1. Controller

Lockcast is the data controller for personal data processed through this Service.

• Address: [Company Address — to be completed]
• Data Protection Officer: [DPO Contact — to be completed]

2. Data We Collect

• Account data: email address, username, display name, avatar.
• Activity data: predictions, votes, challenges.
• Usage data: IP address, browser type, pages visited, session duration.
• Media: images and other files you upload.

3. Lawful Bases (Art. 6 GDPR)

• Contract (Art. 6(1)(b)): to provide the Service and maintain your account.
• Legitimate interests (Art. 6(1)(f)): security, fraud prevention, and service improvement.
• Consent (Art. 6(1)(a)): non-essential cookies and analytics where consent is given.

4. How We Use Your Data

• To operate and improve the Service.
• To send transactional notifications.
• To detect and prevent abuse.
• To comply with legal obligations.

5. Retention

Account data is retained for the life of your account. On deletion, personal data is removed within 30 days, except where retention is required by law.

6. Recipients and Processors

• Supabase — database and authentication (EU region).
• Vercel — hosting and edge functions.
• Tenor — GIF search.

All processors are bound by data processing agreements.

7. International Transfers

Where data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Your Rights

Under GDPR you have the right to: access your personal data; rectify inaccurate data; request erasure; restrict processing; receive your data in a portable format; and object to processing based on legitimate interests.

To exercise any right, contact: [privacy contact — to be completed].

9. Supervisory Authority

You may lodge a complaint with your local data protection authority. In Ireland, this is the Data Protection Commission.

10. Contact

[Privacy contact — to be completed]