Privacy policy

1. Who is responsible?

Pintje is a student project by Ahmad El Ouriaghli Abbas, Antwerpen. Questions about your data? Email pintjebelgium@gmail.com.

2. What data do we collect?

• An account without a name: with your first rating we automatically create an anonymous account, identified only by a random code. We don't know your name.
• If you save your account or log in: your email address, or with Google login the details Google passes on (name, email address and a link to your profile picture).
• Your ratings: the café, the beer, your answers (right glass, cold enough, foam, stars) and the date and time.
• Your distance to the café: to check you're really at the café, your browser asks for your location (only with your permission). We only store the distance in metres, never your location itself.
• Photos, if you add them: they're resized on your device and stripped of location data (GPS) before upload. Anyone with a photo's link can view it.
• Your confirmation that you're 18 or older, with the time.
• Usage statistics: when a café page is viewed, a QR code is scanned, or a rating is started or saved. If you have an account, this is linked to your account code. We use no advertising or tracking cookies and no Google Analytics.
• Technical data: our hosting partners process your IP address and browser details in server logs to run and secure the app.

3. Why, and on what legal basis?

• Running the app (your account, ratings and badges): necessary to provide the service you use (Art. 6(1)(b) GDPR).
• Scores and statistics per café, and reports for breweries and cafés: our legitimate interest in making the app useful (Art. 6(1)(f) GDPR). Breweries and cafés only receive combined figures, never your name, email address or your individual ratings.
• Preventing abuse (for example a check against robots, at most 20 ratings per night, and hiding inappropriate content): our legitimate interest.
• Your location: your permission in your browser. You can refuse or withdraw it; your rating then counts less.

4. Who do we share data with?

We don't sell your data. We work with these service providers, who only process your data on our behalf:

• Supabase: database, login and photo storage. Our data is stored on servers in Frankfurt (Germany).
• Resend: sends our emails (login links and confirmations) from the EU (Ireland). Resend sees your email address and the content of that email to do so.
• Vercel: website hosting. Vercel is a US company, so data may also be processed outside the EU, with appropriate safeguards such as the European Commission's standard contractual clauses.
• Google: only if you choose to log in with Google. Google's privacy policy also applies.
• OpenFreeMap: provides the map. Your browser loads map images from them, so they see your IP address.
• Cloudflare (Turnstile): checks that you're not a robot when an account is created or you log in. Cloudflare sees your IP address and technical details of your browser for this.

5. How long do we keep your data?

• Your account and ratings: until you delete your account.
• Anonymous accounts without ratings: deleted automatically after 30 days.
• Usage statistics: deleted automatically after 13 months.
• Server logs: according to our hosting partners' retention periods.

6. Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and take it with you.

You can delete your account and all your ratings, badges and photos yourself via My pints → Delete account. For anything else, email pintjebelgium@gmail.com; we reply within a month.

If you're unhappy with how we handle your data, you can file a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

7. Cookies

We only use cookies the app needs to work: to keep you logged in and to remember your language. That's why there's no cookie banner.

8. Age

Pintje is only meant for people aged 18 or older.

9. Changes

When the app changes, we update this policy. The date at the top shows the latest version.