1. Who We Are

hosej is a personal side project by Justin, an individual developer based in Berlin, Germany. It is not a registered company or commercial entity.

2. Data We Collect

Data you provide

• Display name or username
• Profile photo (if uploaded)
• Content you create
• Google account information (name, accountID) — only if you sign in with Google

Collected automatically

• i Generated Device Id for passwordless authentication (a device-bound identifier stored in our database)
• Firebase Cloud Messaging (FCM) tokens — stored to deliver push notifications you have opted into
• Session cookies set by NextAuth to keep you logged in across page loads
• Basic server logs and error traces

What we do NOT collect

• Payment or financial information
• Precise GPS location
• Contacts or address book

3. How We Use Your Data

We use your data solely to:

• Operate the hosej service and authenticate your device or account
• Display your profile and content to members of your group
• Send push notifications you have opted into

We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes.

4. Third-Party Services

hosej relies on the following third-party services:

• Google OAuth — optional sign-in (Google LLC)
• Firebase Cloud Messaging — push notifications (Google LLC)
• Amazon S3 — photo and media storage (Amazon Web Services)
• MongoDB Atlas — database hosting
• Vercel — application hosting and edge infrastructure
• Sentry — error monitoring, hosted in the EU (Functional Software, Inc.). Always-on for crash reports without personal identifiers; session replay only with your consent.
• PostHog — product analytics, hosted in the EU (PostHog Inc.). Only loaded after you accept analytics cookies.

Each provider has its own privacy policy which we encourage you to review.

5. Cookies & Analytics

Essential cookies (Auth, theme) keep you logged in and stay on no matter what. Analytics cookies (PostHog product analytics, Sentry session replay) only load if you accept them. You can change your choice any time below — withdrawing consent is as easy as giving it.

6. Data Retention

We retain your data for as long as your account exists and the service is operational. During the alpha phase, data may be deleted at any time as part of resets, migrations, or maintenance — potentially without prior notice.

7. Data Security

We use HTTPS encryption in transit and apply standard access controls on our database. However, as alpha software operated by an individual developer, we cannot guarantee the security of your data. Use hosej at your own risk.

8. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights under the GDPR:

• Right to access the personal data we hold about you
• Right to correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time

To exercise any of these rights, contact us at the address below. As this is a personal project, responses may take up to 30 days.

9. Minors

hosej is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy as the product evolves. The "Last updated" date at the top will reflect any changes. Continued use of hosej constitutes acceptance of the updated policy.

11. Contact

For privacy questions or to exercise your GDPR rights, contact:
Justin — pregame_acid_9o@icloud.com