Privacy
Policy

The operator of Cooplo (Non-commercial Project) is responsible for the processing of your personal data in accordance with GDPR. Cooplo is operated as a non-commercial, private project without profit intent. No fees or commissions are charged. Contact for privacy inquiries: privacy@cooplo.io

We process the following categories of personal data:

• Identity data: Name, email address, phone number (optional)
• Usage data: Login behavior, search history, location data (only when actively shared)
• Communication data: Messages between users, support inquiries
• Technical data: IP address (anonymized), browser type, device type
• Profile data: Listings, preferences, saved searches

We process your data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): To provide our services
• Legitimate interest (Art. 6(1)(f) GDPR): For security and platform optimization
• Consent (Art. 6(1)(a) GDPR): For analytics and marketing (only with your consent)
• Legal obligations (Art. 6(1)(c) GDPR): To comply with legal requirements

To provide our services, we work with the following partners:

• Vercel Inc. (USA): Website hosting and content delivery
• Supabase Inc.: Database storage and authentication
• OpenStreetMap / CARTO: Map display and location services
• Upstash Inc.: Security and rate limiting
• Google Analytics (only with consent): Analysis for platform optimization

We use technically necessary cookies for login and language settings. Analytics cookies (Google Analytics) are only set with your explicit consent. You can adjust your cookie settings at any time via our cookie banner.

For services outside the EU/EEA, we ensure an adequate level of data protection through the EU-US Data Privacy Framework, Standard Contractual Clauses, or adequacy decisions.

We store your data only as long as necessary:

• Account data: Until account deletion
• Communication data: 6 months after completion
• Analytics data: Maximum 26 months
• Server logs: 30 days

Under the GDPR, you have comprehensive rights:

• Access to stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.