Privacy Policy

• Venue submission details, including place name, address, contact email, role, phone, URLs, status information and notes.
• Claim request details, including claimant name, email, phone, role, message and proof link.
• Establishment dashboard data, including login email, public profile edits, broadcast selections and commercial offer requests.
• Contact messages or privacy requests sent by email.
• Commercial requests and payment status information when offers are requested. Stripe payment data may be processed by Stripe if payments are enabled later.
• Technical logs needed to operate, secure and debug the service.
• Cookie consent choices stored in the browser.
• Basic audience measurement data may be collected through privacy-friendly analytics used without advertising cookies. Additional optional analytics data is collected only when those tools are enabled and the user has consented.

• Review venue submissions and decide whether information can be published.
• Review ownership claims before establishment access is connected.
• Let establishments manage public contact details, match broadcasts and commercial requests.
• Answer contact and privacy requests.
• Operate, secure, debug and improve the service.
• Prepare commercial relationships and manual payment follow-up when requested.

• Consent when a user chooses optional cookies or voluntarily submits certain information.
• Legitimate interest for security, abuse prevention, service operation and manual review.
• Contractual necessity if a commercial relationship is created later.
• Legal obligation where records must be kept for accounting, disputes or compliance.

Personal data may be processed by technical providers such as hosting, database, authentication, email, error monitoring, analytics and payment providers when those services are enabled.

WatchSpots does not sell personal data.

Personal data is kept only as long as necessary for the purposes described. Internal retention targets are tracked in the MVP data map and should be reviewed before public acquisition scales.

• Ask for access to your personal data.
• Ask for correction of inaccurate data.
• Ask for deletion when applicable.
• Object to certain processing when applicable.
• Withdraw optional cookie consent at any time from Cookie settings.
• Contact WatchSpots about privacy questions or requests.

• Important user input is validated server-side.
• Admin and establishment actions require protected access checks.
• Alcohol-free, halal-friendly, ownership and moderation evidence is not published as public content.
• Service role keys and secrets must never be exposed to browser code.

Strictly necessary cookies may be used to operate the service, for example establishment and admin sessions. They do not require consent but should be explained.

Privacy-friendly audience measurement may be used to understand basic traffic without enabling advertising cookies. Additional optional analytics and all marketing tools require consent before they load.

You can accept, reject or change optional cookie choices from Cookie settings.