Pingig is a web application available at https://pingig.netlify.app. This Privacy Policy explains how and why personal data is collected, how it is used, how it is kept secure, and what rights users have under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Who We Are (Data Controller)

Pingig is operated by NFTStorm ("we", "us", "our").
NFTStorm is the data controller for personal data processed through Pingig, meaning we decide how and why your data is used.

Contact email: nftstormofficial@gmail.com

2. What Data We Collect and When We Collect It

We collect data only when it is necessary to provide the service.

2.1 Account Data

When you create an account, we collect:

• Email address
• Password (handled securely through Supabase authentication)
• Optional profile information you choose to add

This data is collected at the time of registration, with clear notice that an account is required to use Pingig.

2.2 User-Generated Content

Pingig allows you to record and manage show-related information. You may choose to store:

• Show dates
• Venue names and cities
• Countries
• Check-ins
• Notes and statistics

This data is collected only when you enter it.

2.3 Location Data

Pingig does not track users passively or continuously.

Location data is accessed only when you:

• Choose to "check in", or
• Select "jump to current location"

Your browser will ask for permission before any location data is shared. Location data is used solely to associate a show with a place.

2.4 Payment Data

Payments for Pingig are handled entirely by Stripe and PayPal.

• Pingig does not collect or store card numbers or banking details.
• We receive confirmation of payment status only.

2.5 Technical and Log Data

Limited technical data may be collected automatically through hosting infrastructure, such as:

• IP address
• Browser type
• Device and request metadata

Pingig does not use third-party tracking or advertising analytics.

3. Why We Collect Your Data (Purpose Limitation)

Your data is collected and processed only for the following purposes:

• To create and manage user accounts
• To provide core Pingig features (show logging, stats, profiles)
• To enable public profiles where you choose to make data public
• To manage subscriptions and access to paid features
• To maintain security and service reliability

We do not collect data for advertising or resale.

4. Legal Basis for Processing (GDPR)

We process personal data under the following lawful bases:

• Contractual necessity – to provide the Pingig service
• User consent – for optional features such as location access or public profiles
• Legitimate interests – for security, fraud prevention, and service stability

Any consent requests are clear, explicit, and optional, and can be withdrawn.

5. Public Profiles and Profiling

Pingig generates statistics and summaries (e.g. number of shows, locations visited) based on data you enter.

This constitutes automated profiling, but:

• It has no legal or financial consequences
• It exists solely to display personal insights and optional public profiles
• You fully control what data is visible publicly

No automated decisions affect access to the service.

6. Data Retention

We do not keep personal data longer than necessary.

• Account and content data is retained while your account remains active
• If you delete your account, associated personal data is removed
• Some limited technical logs may persist temporarily for security or legal reasons

7. Data Storage, Security, and Cloud Providers

Pingig uses the following cloud services:

• Supabase (authentication and database)
• Netlify (hosting)

These providers are GDPR-compliant and apply appropriate security measures, including encryption and access controls.

We take reasonable technical and organizational steps to protect your data. No system is completely risk-free, but security is treated as a priority.

8. International Data Transfers

Some data may be processed or stored outside the EU due to cloud infrastructure.

When this occurs:

• GDPR protections still apply
• Transfers rely on appropriate safeguards, such as Standard Contractual Clauses
• Service providers are required to meet GDPR obligations

9. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Withdraw consent at any time
• Receive a copy of your data

You can exercise these rights by contacting us at nftstormofficial@gmail.com.

10. Data Breach Notification

If a personal data breach occurs that poses a risk to users:

• We will notify the relevant authority where required
• Affected users will be informed within 72 hours, where feasible

11. Changes to This Policy

This policy may be updated as Pingig evolves. Any changes will be posted on this page with an updated revision date.

12. Contact

For privacy questions, data access requests, or concerns:

NFTStorm
Email: nftstormofficial@gmail.com