Privacy Policy

This policy covers information used by the Haunted Places Near Me website and its forthcoming mobile app. The mobile app is not yet available. We will update this policy before launch to explain any additional permissions or data uses. For privacy questions or requests, email hello@hauntedplacesnearme.com.

Who is responsible

The operator of Haunted Places Near Me is based in the UK/EU and is responsible for the personal information described here where UK or EU data-protection law applies. Contact hello@hauntedplacesnearme.com with questions or requests.

Information we collect

• Account information. Supabase Auth supports Google OAuth and magic-link sign-in. We may receive the email address, display name and avatar you provide or authorise us to receive, plus account identifiers and related profile details. We do not receive your Google password, and this service does not offer Google-password sign-in.
• Passport and community activity. Depending on what you do, this includes saved and visited places, Haunted Passport entries, visitor reports, evidence uploads stored through Supabase Storage, and place submissions.
• Claims and correspondence. A venue claim can include the claimant's name, email address, role, selected package information and replies or other review correspondence. Claims are treated as private to the claimant, the operator and reviewers unless a different disclosure is required by law or you choose to publish something. We may also use account and submission security information to prevent abuse.
• Public profile and contributions. Your profile visibility setting, approved contributions and community features such as leaderboards can make a display name, avatar or contribution visible to other visitors. The sign-in email is not intended to be displayed as part of a public contribution. Do not put private contact details or sensitive personal information in a report or upload you want published.
• Moderation and safety information. We may keep submissions, reports, evidence, review decisions, abuse reports and related correspondence so we can moderate content, investigate misuse, protect people and accounts, and handle appeals.
• Operational and attribution information. Basic operational logs and first-party usage information may include browser or device details and how you use our pages. When a shared or campaign link is used, we record its source, campaign, referring account identifier where supplied and destination page to understand referrals. Temporary session storage helps avoid counting the same referral more than once.
• Nearby searches. If you grant your browser permission, we use precise coordinates for an optional nearby search. The coordinates are used in the nearby-search URL and may appear in your browser history or our logs. You can decline or revoke browser permission.

Why we use information

We use information to provide accounts, sign-in, saved places and Passport features; display and moderate contributions; process place submissions and claims; respond to correspondence; prevent abuse, fraud and spam; protect the service; understand basic first-party usage and attributed sharing; and improve the website. We send necessary operational messages such as sign-in messages and responses to requests. Resend is used for operational email delivery.

Our lawful bases, where applicable, are: contract to provide requested accounts and features; legitimate interests for safety, moderation, security and basic usage analysis where those interests are balanced against your rights; legal obligation where the law requires processing; and consent where consent is the appropriate basis. We do not treat a lawful-basis statement as consent to unrelated purposes.

Public and private information

You choose what to submit. An approved report, place submission, evidence item or other contribution may be shown publicly and may be copied by visitors or search engines. Profile visibility and leaderboard settings affect what community features show where those controls are available. Business claims, including claim details and replies, are not public by default. Moderation may redact, reject or remove material that exposes personal information or creates a safety risk.

Providers and international processing

We use Vercel for hosting, Supabase for authentication, application data and Supabase Storage, Google for optional Google OAuth, Mapbox for maps and related location requests, and Resend for operational email. A provider may receive the information technically necessary for the feature it provides; for example, loading a map can send technical request information to Mapbox.

Processing may occur outside the UK or EEA. We will use the safeguards required by applicable law and limit transfers to what is necessary for the service.

There are no advertising networks on the website, and we do not sell personal data about users. We may disclose information where required by law or where necessary to protect people, accounts or the service.

Cookies and browser storage

Cookies and similar first-party browser storage help maintain a Supabase sign-in session and preferences. The website may also use local or session storage for sign-in state, form drafts and share-link attribution or deduplication. Nearby-search coordinates may be present in the Explore URL as described above. Clearing or blocking browser storage can sign you out or stop account and form features working.

Retention, deletion and requests

We keep information for as long as it is needed to provide the service, manage contributions and claims, moderate safely, establish or defend legal rights, meet legal obligations or maintain necessary security. Different information is kept for different periods based on its purpose and legal needs. Necessary backups and records kept for legal, security or dispute purposes may remain after a request, so deletion may not be immediate.

For access, rectification, erasure, restriction, objection, data portability where applicable, withdrawal of consent, or an account deletion request, email hello@hauntedplacesnearme.com. Include the account or contribution concerned and, for a public item, its link. We may verify your identity before acting. We usually respond within one month as required by law; applicable law can permit an extension for complex or numerous requests, and we will explain it where relevant.

If you are in the UK, you can complain to the Information Commissioner's Office (ICO). If you are in the EEA, you can contact your local data-protection supervisory authority. This does not limit any other right or remedy.

Children and safety

Do not use a report or upload to share a child's identifying information, someone else's private details, or a precise personal location. If you believe personal information has been submitted improperly, contact us at the address above so we can investigate and moderate it.

Changes to this policy

We may update this policy as the website, providers or forthcoming mobile app change. The date above shows when it was revised. We will provide an appropriate notice when a change materially affects how we use personal information.