Privacy Policy
Last updated: July 2025 · Applies to openstudbook.netlify.app
OpenStudbook is a community-maintained pedigree registry operated as a personal project under EU Regulation 2016/679 (GDPR). This notice explains what personal data we collect, why, and what rights you have over it.
1. Who is the data controller?
The data controller is the operator of OpenStudbook. For data requests, corrections, or deletion contact: marci.jazz@gmail.com. We will respond within 30 days.
2. Data we collect and why
| Data | Purpose | Legal basis | Visibility |
|---|---|---|---|
| Dog records (name, pedigree, photos) | Maintain the community archive | Legitimate interest | Public |
| Submitter name ("Added by") | Attribute records to contributors | Consent (voluntary) | Public |
| Owner name & contact (phone, Instagram, Facebook, website) | Allow community to contact breeders/owners | Consent (voluntary, clearly labelled) | Public — visible on the dog's profile |
| Email address (suggestions & flags only) | Notify you of outcomes; not used for marketing | Consent | Not public — admin only |
| IP addresses | Rate limiting; duplicate-vote prevention; security | Legitimate interest | Not public — deleted within 90 days |
| Voter tokens (localStorage UUID) | Prevent duplicate community votes | Legitimate interest | Not public — browser only |
3. Owner contact data — important notice
If you fill in the owner contact section when submitting a dog record (owner name, WhatsApp number, Instagram, Facebook, or breeder page), that information is displayed publicly on the dog's profile page and is visible to anyone who visits the site, including non-registered users.
Providing this information is entirely optional. Leave all contact fields blank if you prefer privacy. If you have already submitted contact details and want them removed, email us at marci.jazz@gmail.com with the dog's name.
4. Data processors
- Supabase Inc. — database hosting (EU region). Privacy policy
- Brevo SAS — transactional email only (notifications to admin). Privacy policy
- Netlify Inc. / Vercel Inc. — web hosting and CDN. Standard hosting access logs.
No data is sold or shared with advertising networks. We do not use tracking cookies or analytics services.
5. Data export
Pedigree data (names, dates, parentage, health) is available for download at /data under the CC0 public domain dedication. The bulk export does not include owner contact details (phone numbers, social media handles) — only individual dog profile pages display contact information.
6. Data retention
- Dog records are kept indefinitely as part of the community archive. You may request deletion of any record you submitted.
- Email addresses submitted with corrections or flags are deleted after the issue is resolved.
- IP addresses used for rate limiting are cleared within 90 days (Redis TTL).
- Voter tokens exist only in your own browser's localStorage and are never stored server-side in identifiable form.
7. Your rights (GDPR Articles 15–22)
You have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion ("right to be forgotten")
- Restriction — limit how we process your data while a dispute is resolved
- Objection — object to processing based on legitimate interest
- Portability — receive your data in a machine-readable format
To exercise any of these rights, email marci.jazz@gmail.com. We will respond within 30 days.
8. Complaints
If you believe we have processed your data unlawfully, you may lodge a complaint with the Hungarian supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)naih.hu · +36 1 391 1400 · ugyfelszolgalat@naih.hu
This policy was last updated July 2025. We will update it if practices change materially and post a notice on the site.