Privacy policy

This policy describes how Mappy Stars (“we”, “us”) handles personal information when you use our website and online poster editor (the “Service”). It applies to visitors, registered users, and guest sessions unless we say otherwise.

Account details you provide (such as email and display name), authentication data, and messages you send through contact or feedback forms. Content you add to projects (for example dates, places, captions, and layout choices) is stored so the Service can work. We also receive technical data typical for web apps: IP address, approximate location from IP, browser type, device type, timestamps, and cookies or similar technologies needed for sessions, security, and basic analytics.

We use data to provide and improve the Service, authenticate users, process exports you request, respond to support messages, prevent abuse and fraud, comply with law, and understand aggregate usage (not to sell your poster stories).

Where the law requires a “legal basis”, we rely on performance of a contract (providing the Service you asked for), legitimate interests (security, product improvement, and communication proportional to your expectations), consent where we ask for it explicitly, and legal obligation where applicable.

We keep information only as long as needed for the purposes above, including backups and legal compliance. We use industry - standard safeguards; no method of transmission or storage is completely secure, but we work to protect your data against unauthorized access and loss.

We do not sell your personal information. We may share data with infrastructure and tooling providers (for example hosting, email delivery, or error monitoring) who process it on our instructions under appropriate agreements. We may disclose information if required by law or to protect rights, safety, and integrity of users and the Service.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to certain processing, or to withdraw consent where processing is consent - based. You can contact us using the details on the main site. You may also lodge a complaint with a supervisory authority. If you are a child below the age at which parental consent is required in your country, you should not register; the Service is not directed at young children.

Your data may be processed in countries other than your own where we or our providers operate. When required, we use appropriate safeguards (such as standard contractual clauses). We may update this policy; the effective date will change and, where the law requires, we will notify you or ask for consent again.