Privacy Policy

1. Introduction

Welcome to LMULiveries ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lmu-liveries-frontend.pages.dev (the "Service").

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the site.

Data Controller

For the purpose of the General Data Protection Regulation (GDPR), the data controller is LMULiveries. You can contact us using the details provided in the "Contact Us" section of this policy.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Service includes:

A. Personal Data You Provide to Us

• Account Information: When you register for an account, we collect your email address, a username, and a hashed password.
• User-Generated Content: When you upload a livery, we collect the content and information you provide, which includes:
  • The livery title and description.
  • The car class, car model, and tags you associate with the livery.
  • The livery files (.tga files for the paint and region map).
  • Screenshots you upload to showcase the livery.
• Communications: If you contact us directly for support or to report a livery, we may receive additional information about you such as your name, email address, the contents of the message, and any other information you may choose to provide.

B. Data Collected Automatically

• Usage Data: We may automatically collect certain information when you access the Service, such as your Internet Protocol (IP) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. For more details, please see the "Cookies and Tracking Technologies" section below.

C. Email Communications Data

• Email Delivery Information: When we send you emails through our service provider Mailjet, we may collect information about email delivery, including delivery status, open rates (if you enable image loading), and bounce information to ensure reliable communication.
• Email Preferences: We track your email preferences and unsubscribe requests to respect your communication choices.
• Transactional Email Content: We process your email address and basic account information to send essential service emails such as:
  • Account verification and welcome messages
  • Password reset instructions
  • Security alerts and login notifications
  • Important service updates and announcements

3. Legal Basis for Processing Your Information

We process your personal data based on the following legal grounds under the GDPR:

• Your Consent: We rely on the consent you provide at registration to create your account and process your data as outlined in this policy.
• Performance of a Contract: We process your data to fulfill our obligations to you under our Terms of Service, such as hosting your liveries and managing your account.
• Legitimate Interests: We process data for our legitimate interests, such as for security monitoring, fraud prevention, and service analytics, provided that these interests are not overridden by your data protection rights.
• Legal Obligation: We may be required to process your data to comply with a legal or regulatory obligation.

3.1 Purposes of Using Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your account.
• Provide, operate, and maintain our Service.
• Display your uploaded liveries and associate them with your public username.
• Enable user-to-user interactions, such as viewing another user's profile and their uploaded content.
• Respond to your comments, questions, and provide user support.
• Monitor and analyze usage and trends to improve your experience with the Service.
• Enforce our terms and policies and prevent fraudulent or illegal activity.
• Process reports of inappropriate content and take appropriate action.
• Communicate with you about your account, including password resets and email confirmations.
• Send essential transactional emails via our email service provider Mailjet, including account confirmations, password resets, security alerts, and important service notifications.

4. How We Share Your Information

We do not sell your personal information. We may share information we have collected about you in certain situations with trusted third-party service providers ("sub-processors") who perform services for us or on our behalf. Your information may be disclosed as follows:

A. By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

B. Third-Party Service Providers

We share your data with the following third-party service providers to operate our Service:

• Backend Platform: We use Supabase for our database hosting and user authentication services.
• File Storage: We use Backblaze B2 Cloud Storage for securely storing and delivering user-uploaded content, such as livery files and screenshots.
• Email Delivery: We use Mailjet to send transactional emails including account verification, password resets, security notifications, and service updates. Your email address and basic account information may be processed by Mailjet for delivery purposes only.
• Analytics: We use Google Analytics to monitor and analyze the use of our Service, provided you have given explicit consent via our cookie banner.

All third-party service providers are contractually required to protect your data and use it only for the specific services they provide to us. They cannot use your data for their own purposes or share it with other parties.

C. International Data Transfers

Our service providers may be located in countries outside of the European Economic Area (EEA), such as the United States and France. When we transfer your data to these countries, we ensure that appropriate safeguards are in place to protect your personal data. For our providers like Supabase, Backblaze, Mailjet, and Google, we rely on their adherence to Standard Contractual Clauses (SCCs) as approved by the European Commission, which provide a legal framework for the secure transfer of personal data outside the EEA.

Specifically, Mailjet (operated by Mailgun Technologies) processes email data in compliance with GDPR and maintains appropriate technical and organizational measures to protect your email communications.

D. Publicly Shared Information

Your username and any content you upload (including liveries, screenshots, and descriptions) are publicly visible to all users of the Service. When you upload content, it will be associated with your public profile.

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

6. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Account information is retained as long as your account is active.

7. Your Data Rights

Under GDPR, you have comprehensive rights regarding your personal data. You can exercise many of these rights directly through our Service:

• The right to access and data portability: You can request a complete export of your personal data in a machine-readable format by using the "Export My Data" feature in your account settings.
• The right to rectification: You can correct or update your account information, such as your username and email, directly on your profile page.
• The right to erasure ("Right to be Forgotten"): You have the right to request the permanent deletion of your account and all associated personal data. This can be initiated through the "Delete My Account" feature in your account settings.
• The right to object to processing: You have the right to object to our processing of your personal data where we are relying on a legitimate interest as our legal basis.
• The right to withdraw consent: You can withdraw your consent at any time by deleting your account.
• The right to object to email processing: You can opt out of non-essential email communications at any time through your account settings or by using the unsubscribe links in our emails. Note that essential security and account-related emails cannot be disabled as they are necessary for account functionality.

To exercise any of these rights, or if you have questions about them, please visit your account settings or contact our Data Protection Officer at the email provided below.

8. Cookies and Tracking Technologies

We use cookies to help customize the Service and improve your experience. A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns.

We use cookies for the following purposes:

• Essential Cookies: These are necessary for the Service to function and cannot be switched off. They are used for handling user sessions and authentication.
• Performance Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site.

Most browsers are set to accept cookies by default. You can usually choose to set your browser to remove cookies and to reject cookies.

9. Children's Privacy

Our Service is not intended for use by individuals under the age of **16**. We do not knowingly collect personally identifiable information from anyone under 16. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 16 without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: