Privacy Policy - like.lu

1. Who We Are

like.lu is a platform for sharing curated lists of places in Luxembourg. This privacy policy explains how we collect, use, and protect your personal data when you use our service.

2. Data We Collect

Account data — When you sign in with Google or Apple, we receive your name, email address, and profile picture from that provider. We store this to create and manage your account.

Content you create — Lists, location submissions, ratings, and notes you submit are stored on our servers.

Activity data — We record actions such as following users, liking lists, and submitting locations in order to provide core platform features.

Usage analytics — We use Vercel Analytics to collect anonymous usage statistics (page views, navigation patterns). No personally identifiable information is included in this data.

3. How We Use Your Data

To provide and operate the like.lu service
To display your public profile and lists to other users
To send you notifications about activity related to your content
To moderate content and enforce community guidelines
To improve the platform based on anonymous usage statistics

4. Data Sharing

We do not sell your personal data. We share data only with:

Vercel — our hosting provider, which processes requests and stores data in the European Economic Area
Google / Apple — for authentication only; we do not share your data back to these providers beyond the initial sign-in

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data (name, email, profile picture) is removed within 30 days. Public content (lists, location entries) may remain visible in anonymised form unless you explicitly request its removal.

6. Your Rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights under the GDPR:

Right of access — request a copy of your personal data
Right to rectification — correct inaccurate data
Right to erasure — request deletion of your account and data
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing of your data in certain circumstances

To exercise any of these rights, please contact us. We will respond within 30 days.

7. Account Deletion

You can delete your account at any time from your account settings. This will permanently remove your profile and personal data from our systems.

8. Cookies

We use a single session cookie to keep you signed in. We do not use tracking or advertising cookies.

9. Security

We use industry-standard security measures including HTTPS encryption and secure session management. Passwords are not stored — authentication is handled entirely by your identity provider (Google or Apple).

10. Changes to This Policy

We may update this policy from time to time. We will update the date at the top of this page when changes are made. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or to exercise your rights, please contact us.