Privacy Policy

1. Data Controller

The data controller for data collected through the Service is the creator of Hobbistas. For matters concerning the protection of personal data, you may contact us at:

support@hobbistas-hub.com

2. What Data We Collect

Depending on your use of the Service, we may collect the following categories of data:

• Account information: email address, username, encrypted password, account creation date.
• Profile information (optional): display name, full name, country, bio, platform IDs (PSN, Xbox, Steam), favorite genres, favorite platform, gaming start year.
• Usage data: profile settings, backlog entries, game status, playtime hours you enter, articles you create or edit.
• Technical information: IP address, browser type, approximate device type, basic logs for security and debugging purposes.
• Cookies & similar technologies: authentication cookies and session tokens via Supabase, and any strictly necessary cookies for platform functionality.

We do not intentionally collect sensitive personal data (e.g., health information, political opinions, etc.).

3. Processing Purposes & Legal Basis

We use your data for the following purposes:

• Account creation and management: to allow you to log in, save your backlog, manage your profile, etc. (legal basis: performance of contract).
• Security & protection: to prevent abuse, malicious activity, and unauthorized access (legal basis: legitimate interest).
• Communication with you: for email verification, password reset, and account-related notifications (legal basis: performance of contract / compliance with user requests).
• Service improvement: basic usage analysis, statistics, and feedback (legal basis: legitimate interest). We do not conduct profiling or advertising targeting.

4. Where Your Data is Stored

Your data is primarily stored on infrastructure provided by Supabase (database, authentication), as well as hosting infrastructure used to operate Hobbistas.

These providers act as data processors on our behalf, under contractual terms and security policies. We make reasonable efforts to host data within the EU where feasible.

5. Data Retention Period

Your data is retained for as long as:

• you maintain an active account on the Service,
• it is necessary to provide the features you use,
• or it is required by applicable law.

When you delete your account, we make reasonable efforts to delete or anonymize personal data that identifies you, unless legal or technical obligations require longer retention (e.g., security logs).

6. Cookies & Similar Technologies

The Service uses cookies primarily for:

• authentication (login / staying logged in),
• basic technical functionality (e.g., preferences, session management),
• potentially basic statistical traffic analysis (if enabled).

You may configure your browser to block or delete cookies, but this may affect the functionality of the Service (e.g., automatic logout).

7. Data Sharing with Third Parties

We do not sell, rent, or trade your personal data. Data may be shared:

• with infrastructure providers (such as Supabase) who act as data processors,
• with competent authorities when required by law or in response to legal process,
• if deemed necessary to protect rights, the security of the Service, or other users.

8. Your Rights under GDPR

You have the following rights regarding your personal data:

• right of access to your data,
• right to rectification of inaccurate or incomplete data,
• right to erasure ("right to be forgotten") under certain conditions,
• right to restriction of processing,
• right to data portability,
• right to object to certain forms of processing.

To exercise your rights, you may contact us at support@hobbistas-hub.com. We will respond within a reasonable timeframe and in accordance with applicable legal frameworks.

You also have the right to lodge a complaint with the competent supervisory authority (Hellenic Data Protection Authority – www.dpa.gr) if you believe the processing of your data violates the law.

9. Information Security

We implement reasonable technical and organizational measures to protect your data from unauthorized access, loss, or alteration. However, no online service can guarantee absolute security.

9.1 Password Security

User passwords are never stored in human-readable form. Authentication is handled via Supabase, which uses modern encryption techniques (hashed & salted) in accordance with current security standards.

As a result, neither Hobbistas nor its administrators have access to actual passwords. In case of password loss, recovery is performed exclusively through secure email verification links.

10. Changes to this Privacy Policy

This Policy may be updated periodically to reflect changes to the Service, providers, or legal frameworks. The updated version will be published on the website and, where appropriate, you may receive notification.

11. Relationship with Terms of Service

This Privacy Policy supplements our Terms of Service. In case of any conflict, the provisions that better protect your rights as a data subject shall prevail.