How pagedar handles personal data
This policy explains how we process data when people visit pagedar, create accounts, submit website reviews, report content, or interact with AI-assisted review summaries.
Controller
The controller is [Pagedar GmbH / legal entity to be completed], [Street and number], 1010 Vienna, Austria. You can contact us at privacy@pagedar.com or office@pagedar.com.
If a data protection officer becomes required or is appointed, the contact details will be added here.
Data we process
| Context | Data | Purpose | Legal basis |
|---|---|---|---|
| Website visits | IP address, device and browser data, request URLs, timestamps, security logs. | Deliver the site, prevent abuse, secure the service, debug errors. | Legitimate interests and technical necessity. |
| Accounts | Name or username, email, password hash where applicable, OAuth provider identifiers, profile metadata, avatar URL, settings, session tokens, verification status. | Create and maintain accounts, provide sign-in through Google, optional Apple sign-in if enabled, email/password accounts, user profiles, and fraud prevention. | Contract performance and legitimate interests. |
| Authentication and anti-abuse checks | Login events, OAuth redirect data, email/password sign-in events, CAPTCHA or Turnstile tokens, browser and network signals, security metadata. | Authenticate users, prevent fake accounts and automated review submissions, secure the service, and enforce platform integrity. | Contract performance, legitimate interests, and legal obligations where applicable. |
| Reviews and ratings | Submitted ratings, headlines, comments, reviewed URLs/domains, pending draft data, moderation status, moderation notes, timestamps, profile link. | Receive reviews, submit them for moderation, publish approved reviews, calculate quality signals, show rankings, enforce rules. | Contract performance, legitimate interests, and consent where required. |
| Reports and complaints | Reporter name, email, report reason, URLs, attachments, statements and decisions. | Process illegal-content notices, moderation appeals, and legal requests. | Legal obligations and legitimate interests. |
| AI summaries | Review text, scores, metadata, and generated summary outputs. | Summarise what users say about a website and detect recurring themes. | Legitimate interests, contract performance, and consent where required. |
| Communications | Email address, message content, support history. | Respond to inquiries, provide support, document requests. | Contract performance, legitimate interests, and legal obligations. |
Cookies, storage, and analytics
We use technically necessary cookies or browser storage only where needed to provide a requested feature, secure the service, remember your consent choice, keep a preview session unlocked during development, preserve a pending review draft while you sign in, or maintain an authenticated session.
The cookie settings module stores your choice in localStorage under
pagedarCookieConsent. This record contains the consent
version, selected categories, source, and update time. It is used so
that we do not ask again on every page and so that optional tools can
be kept off unless you choose them.
Supabase Auth may store session information in your browser so that you stay signed in and can submit reviews. pagedar may use sessionStorage for short-lived review drafts and preview state. These technologies are used to provide requested account and review features, not for advertising.
Optional analytics, marketing pixels, advertising cookies, profiling, or similar technologies must not be activated before valid consent is obtained. The current consent interface offers separate settings for necessary, preferences, analytics, and marketing. Necessary storage remains on; optional categories remain off unless selected.
You can change or withdraw optional consent at any time through the Cookie settings control in the footer. If we add analytics or marketing tools later, this policy and the consent interface will identify the provider, purpose, storage period, and opt-out method before those tools are used.
Fonts are hosted locally by pagedar. The production site should not request Google Fonts from Google servers.
Processors and service providers
We use service providers only where needed to operate, secure, host, develop, or improve pagedar. The current or expected providers include:
- Cloudflare, Inc. for DNS, CDN, DDoS protection, security filtering, SSL/TLS, and related request logs.
- Cloudflare Turnstile for human verification, bot detection, and abuse prevention on sign-in and review submission forms.
- Supabase, Inc. for authentication, user sessions, profile records, review storage, database hosting, row-level access controls, and server-side Edge Functions.
- Google LLC for Google Sign-In when a user chooses to authenticate with Google.
- Apple Inc. for Sign in with Apple if and when that provider is enabled and a user chooses it.
- jsDelivr / Prospect One for delivery of the Supabase browser library on pages that use account or review submission features.
- GitHub, Inc. for source code hosting, collaboration, deployment workflows, issue tracking, and related development records.
- [Hosting provider to be completed] for application hosting, databases, backups, and logs.
- [Email provider to be completed] for transactional and support email.
- [AI provider to be completed] for review summaries, moderation assistance, abuse detection, or language processing.
- [Analytics provider to be completed, if used] for consent-based usage measurement.
- [Payment provider to be completed, if paid features are launched].
Where required, we enter into data processing agreements and use appropriate safeguards for transfers outside the European Economic Area, such as EU Standard Contractual Clauses or another valid transfer mechanism.
Authentication providers
If you sign in with Google, Google may process information needed to authenticate you and return selected account information to pagedar, such as your email address, name, profile image, and provider identifier, depending on your Google account settings and the OAuth consent flow.
Sign in with Apple is currently prepared as an optional provider. If enabled and used, Apple may provide account identifiers, email relay information, and selected profile information according to the choices you make in Apple's sign-in flow.
Email/password sign-in uses your email address to create and access your account. You are responsible for keeping access to your email account and password secure.
AI-assisted processing
pagedar may use AI systems to summarise review trends, identify recurring praise or criticism, support spam and abuse detection, and assist human moderation. AI-generated summaries are intended to help users navigate reviews; they do not replace the underlying reviews.
We aim to label AI-assisted summaries clearly. Important decisions affecting users, such as account restrictions or content removals, may be supported by automated tools but should be subject to human review where required by law or where the impact makes review appropriate.
Retention
- Account data is kept while the account exists and for a reasonable period afterwards where needed for legal, security, or fraud-prevention purposes.
- Submitted reviews may remain pending until moderation is complete. Published reviews may remain visible until removed by the user, moderated, or deleted under our retention rules.
- Pending browser drafts are stored only on the user's device through sessionStorage and can be cleared by closing the session or clearing browser storage.
- Security logs are generally kept for a limited period unless needed to investigate abuse, security incidents, or legal claims.
- Legal notices, reports, moderation decisions, and appeals may be retained as long as needed to comply with law and defend claims.
Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also lodge a complaint with the Austrian Data Protection Authority or another competent supervisory authority.
To exercise your rights, contact privacy@pagedar.com.