Privacy Policy
Last Updated: February 24, 2026
1. Controller
This Privacy Policy explains how Collab-Story processes personal data. The data controller is Nicolas Gerig, Switzerland. Contact: info [at] collab-story [dot] com.
2. Information We Collect
We collect only data needed to run the project: (a) content you submit (for example votes and story idea input), (b) a pseudonymous browser fingerprint/local identifier used to enforce voting rules and reduce abuse, and (c) limited technical metadata (such as IP, user-agent, request logs, and error logs) provided by hosting and security infrastructure.
3. Why We Process Data (Purpose and Legal Basis)
We process data to operate the service, keep voting fair, detect abuse, secure the platform, troubleshoot incidents, and improve reliability. For Swiss/EU users, processing is based on legitimate interests, performance of requested services, legal obligations where applicable, and your consent where required.
4. Local Storage and Similar Technologies
We use browser localStorage to store a pseudonymous identifier and local vote state so voting works correctly and repeat votes can be limited. You can clear localStorage in your browser settings, but some functionality may stop working correctly.
5. Service Providers
We use third-party providers that process data on our behalf or as independent controllers for their services, including Vercel (hosting/logging), Supabase (database/storage), and AI providers such as Replicate (content generation).
6. International Data Transfers
Your data may be processed in countries outside Switzerland or the EEA, depending on provider infrastructure. Where required, we rely on contractual and organizational safeguards offered by those providers.
7. Data Retention
We keep data only as long as needed for the project and security purposes. Story and vote records may be retained for archive integrity; technical logs are retained for operational/security needs and then deleted or anonymized according to provider settings and legal requirements.
8. Your Rights
Depending on applicable law (including Swiss FADP and, where applicable, GDPR), you may request access, correction, deletion, restriction, objection, or data portability. You may also withdraw consent where processing is based on consent.
9. Security
We apply reasonable technical and organizational measures to protect data. No online system can be guaranteed 100% secure.
10. Changes and Contact
We may update this Privacy Policy from time to time. The current version is always available on this page with the updated date. For privacy requests, contact info [at] collab-story [dot] com.