Privacy Policy.

The data controller for questry is the operator of the site, a sole trader registered in the Czech Republic.

• Controller: Max Kukla
• IČO: 10981888
• Registered seat: Jungmannova 157, 506 01 Jičín, Czechia
• Contact: hello@questry.app

We only collect what you give us to make the directory work, and we do not sell it.

No ad networks. No tracking pixels. No data brokers.

The minimum needed to run the platform:

• Account: your email, display name, invite-code lineage, and trust level. Needed so you can log in and so the community knows who vouched for whom.
• Activity: the bookmarks, vouches, warnings, and submissions you make. This is the substance of the directory.
• Automated: basic server logs — IP address, browser type, locale, theme — kept only as long as needed for security and to render the app correctly.

What we don't collect: no Google Analytics, no advertising pixels, no screen recording, no cross-site tracking.

• Performance of contract (GDPR Art. 6(1)(b)): account and activity data lets us deliver the service you signed up for.
• Legitimate interest (GDPR Art. 6(1)(f)): minimal server logs to keep the platform secure, prevent abuse, and debug issues.
• Consent (GDPR Art. 6(1)(a)): for any non-essential cookies you opt into.

The only parties that touch your data are the infrastructure providers we use to run the site:

• Supabase — database and authentication.
• Cloudflare — hosting and DNS.

They act as data processors under data processing agreements and aren't allowed to use your data for their own purposes. Some of these providers may process data outside the EEA; where that happens, transfers rely on the European Commission's Standard Contractual Clauses. Beyond that: law enforcement only when we're legally compelled. Never advertisers. Never data brokers.

• Access — ask for a copy of the data we hold about you.
• Rectification — fix wrong data, mostly directly from your settings.
• Erasure — delete your account from your profile, or ask us to do it.
• Restriction & objection — limit or object to processing based on legitimate interest.
• Portability — export your bookmarks and submissions.
• Complaint — if you think we're mishandling your data, lodge a complaint with the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.cz), or your local EU DPA.