The short version
- You can use the calendar and the map without an account and without giving us anything.
- No cookies, no advertising, no tracking, no selling of data. Ever.
- Our database and our email service are in the EU.
- The "app is live" list is deleted right after the one email.
Who is responsible
HobbyLux is run by the company below. It decides why and how your data is used (the "controller").
DEVFIRE WEB S.R.L.Str. Corvinilor nr. 64, ap. 1
440080 Satu Mare, jud. Satu Mare
Romania
Email: hello@hobbylux.app · Company details: Legal notice
What we collect and why
Visiting the website
- What
- Your IP address, browser type, the page and the time, in the server logs. Your language comes from the web address or your browser setting; we store nothing for it.
- Why
- To deliver the pages, keep the site safe and show it in your language.
- Legal basis
- Our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).
- How long
- Server logs: at most 30 days at our host Vercel.
The map
- What
- To draw the map, your browser loads map images from MapTiler. MapTiler sees your IP address and which map area is shown. On the "Add your market" form, the address search sends what you type to MapTiler to suggest places.
- Why
- To show where the markets are.
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR).
- How long
- MapTiler keeps no profile of you; see the processors below.
"Tell me when the app is live"
- What
- Your email address, the language of the page and the time you ticked the box.
- Why
- To send you one email on the day the app is out. Nothing else.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR). You can take it back at any time.
- How long
- We delete the whole list right after that one email is sent.
Maker form ("List me as a maker")
- What
- Stand name, what you make, your town, your email, the language of the page, the time of your consent.
- Why
- To write to you about a maker profile when the app opens, and to prepare it. Nothing is public.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR).
- How long
- Until you make your profile in the app, at most 6 months after the app launch. Sooner if you ask.
Organiser form ("Add your market")
- What
- The market details, the pin of the entrance, your name and email, the code we email you, the language of the page and the time of your consent. A “This is my market” claim stores the same: your name and email, the code and the market you claim.
- Why
- To list the market on the calendar and to reach you about it. The market details and the pin become public once we have checked them; your name and email never do.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR).
- How long
- A request you do not confirm with the code: deleted after 24 hours. The request: one year after the market's last day. Your name and email: as long as you look after a market on HobbyLux. Sooner if you ask.
Organiser contacts we keep
- What
- For each market on the calendar: the contact of the organising club, commune or association, as published on its own public web page, for example an email address and a phone number. We take it from that public page, not from you.
- Why
- To check the market details and ask about changes. It is never shown on HobbyLux: the market page shows only the organiser's name.
- Legal basis
- Legitimate interest in a correct calendar (Art. 6(1)(f) GDPR). You can object at any time: write to hello@hobbylux.app.
- How long
- Until one year after the market's end date, then deleted. Sooner if you ask.
"Is something wrong?" on a market page
- What
- What is wrong, your message and the language of the page. We do not ask for your name or email.
- Why
- To fix the calendar.
- Legal basis
- Legitimate interest in a correct calendar (Art. 6(1)(f) GDPR).
- How long
- Deleted once the market page is fixed, at most 90 days.
Emails you send us
- What
- Your email address and what you write to hello@hobbylux.app.
- Why
- To answer you.
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR), or steps you asked for (Art. 6(1)(b)).
- How long
- Up to one year after the conversation ends.
The HobbyLux app
When the app is out, this notice will also cover it: your account (sign-in with Apple, Google or an email code), the makers and markets you follow, notifications, and games. Game data is deleted 90 days after the market, see the game rules. Makers see counts, never who follows them.
Who helps us
Supabase
Database for the calendar, the forms and, later, the app. Servers in the EU (Frankfurt, Germany).
Bird
Sends our emails: the receipts, the sign-in codes and the one launch email. Processing in the EU.
Bird keeps the text of an email for 30 days at most, and only if storage of content is on. For the delivery record (address, time, status) Bird publishes no fixed period.
Vercel
Hosts the website. Vercel Inc. is a US company; it is certified under the EU-U.S. Data Privacy Framework and bound by the EU Standard Contractual Clauses. Our server functions run in Frankfurt.
MapTiler
Map images for the map. MapTiler AG is in Switzerland, which the EU recognises as giving an adequate level of data protection.
Google Workspace
Runs our mailbox hello@hobbylux.app (Google Workspace). For customers in the EU the provider is Google Ireland Limited. Google may also process data in other countries; its data processing terms set the safeguards.
Each of them works only on our instructions, under a data processing agreement (Art. 28 GDPR). We do not sell or rent your data, and we do not use it for advertising.
Your rights
You can ask us at any time to:
- see the data we have about you, and get a copy;
- correct it, or delete it;
- limit how we use it, or object to it;
- get the data you gave us in a common, machine-readable format, or have us send it to another service;
- take back your consent. This does not affect what we did before.
Write to hello@hobbylux.app. We answer within one month.
No computer makes decisions about you on its own that have legal or similarly important effects for you (Art. 22 GDPR).
You can also complain to a data protection authority, for example the CNPD in Luxembourg (cnpd.public.lu) or the ANSPDCP in Romania (dataprotection.ro), where our company is registered.
Age
The forms on this website are for people aged 16 or older.
Changes
If we change how we use data, we update this page and the date below. If the change matters for you and we have your email, we tell you first.
Version 1 · 11 Oct 2026