https://quick.surf/privacy

1. Introduction
   Quick.Surf B.V. ("Quick.Surf", "we", "us") respects the privacy of all users of its service. This privacy policy describes what personal data we collect, why we collect it, and how we handle it.
2. Data Controller
   Quick.Surf B.V., based in the Netherlands, is the data controller for the processing of personal data via the Quick.Surf service.
3. What Data Do We Collect?
   Account data: email address, username, and encrypted password upon registration.
   Usage data: stored bookmarks, categories, theme settings, and preferences.
   Technical data: IP address, browser type, operating system, and referring URL when visiting the service.
   Payment data: payments are processed via Stripe. We do not store credit card details; Stripe processes these in accordance with PCI-DSS.
4. Purposes of Processing
   We process personal data for:

Providing and maintaining the service.
Account management and authentication.
Improving the service and user experience.
Communication about the service (e.g., security notifications).
Compliance with legal obligations.

1. Legal Basis
   Processing is based on:

Performance of a contract: for providing the service.
Legitimate interest: for security and improvement of the service.
Legal obligation: for tax and accounting obligations.

1. Sharing with Third Parties
   We only share personal data with:

Supabase: hosting and database management.
Stripe: payment processing.
Vercel: web application hosting.
We do not sell personal data to third parties.

1. Retention Periods
   Personal data is retained as long as the account is active. After account deletion, data is removed within 30 days, unless legal retention obligations apply.
2. Security
   We take appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS), encrypted passwords, and secured infrastructure.
3. Your Rights
   Under the GDPR, you have the right to:

Access your personal data.
Rectification of inaccurate data.
Erasure of your data ("right to be forgotten").
Restriction of processing.
Data portability.
Object to processing.
You can exercise these rights by contacting us via X (@surfquickly).

1. Cookies
   Quick.Surf uses functional cookies necessary for the operation of the service (such as session and language preference). We do not use tracking or advertising cookies.
2. Changes
   This privacy policy may be amended. Changes will be published on this page. Continued use of the service constitutes acceptance of the amended policy.
3. Contact
   For questions about this privacy policy, you can contact us via X (@surfquickly).