Privacy Policy

1. Who we are

LightsNGo ("we", "us") is operated by [YOUR LEGAL NAME / COMPANY NAME], [COUNTRY]. For any question about this policy or your data, contact us at [YOUR CONTACT EMAIL]. If you are in the EU and we are required to have one, our EU representative is [EU REPRESENTATIVE NAME AND ADDRESS, if applicable].

2. What data we collect

• Account data: email address and password (stored securely, hashed, by our authentication provider).
• Profile data you choose to add: username, country, gender, birth year, favorite team/driver, tracks visited, profile photo, bio.
• Content you create: posts, chat room messages, city guide tips, and private messages.
• Age and consent records: a timestamp showing you confirmed you are 18+ and accepted these terms.
• Technical data: basic log/session data needed to keep you signed in and keep the service secure.

3. Why we process it (legal basis)

• To provide the service (contract) — creating your account, showing you the feed, chat rooms, and messages.
• With your consent — optional profile fields, and any marketing communication, if we ever add it.
• Legitimate interest — keeping the platform secure, preventing abuse, moderating harmful content.

4. Who we share it with

We don’t sell your data. We use the following processors to run the service, who only process data on our instructions:

• Supabase (database, authentication, real-time messaging) — data hosted in [SUPABASE PROJECT REGION].
• Vercel (hosting the website itself).

Other users can see content you post publicly (feed, chat rooms, city guide tips) and the profile fields you choose to fill in. Private messages are only visible to you and the recipient.

5. How long we keep it

We keep your account and content for as long as your account is active. If you delete your account, we delete your profile data; some content (like messages you sent to others) may remain visible to the other party as is standard for messaging services, unless you request full deletion by contacting us.

6. Your rights (GDPR)

If you are in the EU/EEA or UK, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at [YOUR CONTACT EMAIL]. We’ll respond within 30 days.

7. Cookies

We use only the essential cookies needed to keep you logged in and your session secure. We do not currently use tracking or advertising cookies. [UPDATE THIS SECTION if you add analytics or advertising later — you'll need a cookie consent banner.]

8. Age requirement

LightsNGo is only for people aged 18 and over. We don’t knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we will delete it.

9. Changes to this policy

We may update this policy as the platform grows. We’ll post the updated date at the top of this page, and notify you of significant changes.