Contents

1. Who We Are
2. Information We Collect
3. How We Use Your Information
4. How We Share Your Information
5. Cookies & Local Storage
6. Data Retention
7. Your Rights
8. Childrens Privacy
9. Security
10. Changes to This Policy
11. Contact Us

1. Who We Are

NBD Finder, LLC ("NBD Finder," "we," "our," or "us") operates the NBD Finder platform — a community-driven map for discovering skate spots, placing bounty challenges, and claiming rewards for documented trick landings. We are headquartered in the United States.

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website and platform (collectively, the "Services"). By using the Services you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: email address, username, password (stored as a secure hash — we never see your plain-text password).
• Profile details: display name, home city, age, bio, and profile photo you choose to upload.
• Spot submissions: spot name, description, location coordinates, obstacle details, and photos you upload.
• Bounty challenges: trick name, obstacle, challenge amount, and any special requirements you set.
• Claim submissions: video proof (YouTube/Vimeo URL or uploaded file), and any optional notes you include with a claim.
• Forum posts & comments: text content, channel, and timestamps of anything you post.
• Payment information: processed by Stripe — we never see or store your full card number. See Section 4.

2.2 Information Collected Automatically

• Device & browser: browser type, operating system, screen resolution, and language preferences.
• Usage data: pages visited, features used, buttons clicked, and session duration.
• IP address: used for fraud detection, approximate geolocation (city/region level), and rate limiting.
• Log data: error reports and performance metrics from our infrastructure provider.

2.3 Location Information

When you submit a new spot, we record the latitude/longitude of that pin. The map displays your current location on-screen for navigation — this is processed locally in your browser and is not stored on our servers unless you attach it to a spot submission.

2.4 Content You Upload

Photos and video files uploaded to NBD Finder are stored in our cloud storage (Supabase Storage). These files may be publicly accessible to other users if attached to a public spot or claim. Uploaded claim videos are only visible to platform administrators during the review process.

3. How We Use Your Information

PurposeInformation UsedLawful BasisCreate and manage your accountEmail, username, password hashContract performanceDisplay your profile and activityUsername, bio, city, spots submitted, claimsContract performanceProcess bounty challenges and payoutsPayment data (via Stripe), claim video, usernameContract performanceModerate submitted contentSpots, photos, claims, forum postsLegitimate interest (platform safety)Send in-app notificationsUser ID, event data (claim approved/denied)Contract performanceSend transactional email notificationsEmail address, event data (claim results, mentions, messages)Legitimate interest; you may opt out at any timeImprove the platformUsage data, error logsLegitimate interestPrevent fraud and abuseIP address, account historyLegitimate interest / Legal obligationComply with legal obligationsAny data relevant to a legal requestLegal obligation

We do not use your information for automated profiling or decision-making that produces legal or similarly significant effects.

4. How We Share Your Information

We do not sell your personal data. We share it only in these circumstances:

4.1 Service Providers

ProviderPurposeData SharedSupabaseDatabase, authentication, file storageAll platform data (stored in US data centers)StripePayment processing and bounty payoutsPayment details, payout infoGoogle Fonts / CDNFont deliveryYour IP address (standard CDN request)MapLibre / MaptilerMap tile deliveryYour IP address and approximate viewportResendTransactional email deliveryYour email address and notification content

4.2 Public Information

Content you submit as public — including spot names, descriptions, photos, and forum posts — is visible to all users of the platform. Your username is displayed alongside your submissions. Spot location coordinates are shown on the public map.

4.3 Legal Disclosures

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If NBD Finder is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction. We will notify users of any material change in ownership or data handling practices.

5. Cookies & Local Storage

5.1 What We Use

Name / TypePurposeDurationSupabase auth sessionKeeps you logged in between visitsSession / up to 7 daysBrowser local storageRemembers UI state (e.g., active map filters)Until cleared

5.2 No Third-Party Tracking Cookies

We do not currently use Google Analytics, Meta Pixel, or any other third-party advertising or tracking cookies. If this changes, we will update this policy and provide a consent mechanism before any tracking begins.

5.3 Managing Cookies

You can clear cookies and local storage at any time through your browser settings. Clearing your session cookie will log you out of the platform.

6. Data Retention

• Active accounts: data is retained for as long as your account remains active.
• Deleted accounts: profile and personal data (email, bio, city, age, avatar) are deleted immediately upon account deletion. Public content you created (spots, forum posts) is anonymized — your username and attribution are removed, but the content itself may be retained for platform integrity.
• Soft-deleted spots: spots moved to the admin trash are permanently deleted after 30 days.
• Claim videos: uploaded claim video files are deleted within 90 days of a claim being resolved (approved or denied), unless required for dispute resolution.
• Forum posts: retained while your account is active. Deleted posts are removed immediately from public view.
• Legal hold: data may be retained longer if required by law or for active legal proceedings.

7. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data. To exercise any of these, contact us at [email protected].

7.1 Rights for All Users

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: delete your account directly from your account settings (Settings → Account → Delete Account), or email us at [email protected]. Deletion is permanent and processed immediately.
• Portability: request your data in a structured, machine-readable format.
• Opt out of email notifications: toggle off Email Notifications in your account settings, or use the one-click unsubscribe link at the bottom of any notification email.

7.2 EU / EEA Residents (GDPR)

You have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. Our lawful bases for processing are described in Section 3. For data processed on the basis of legitimate interest, you may object at any time.

7.3 California Residents (CCPA / CPRA)

California residents have the right to know what personal information is collected, to opt out of the sale of personal information (we do not sell personal information), to request deletion, and to non-discrimination for exercising these rights.

8. Childrens Privacy

NBD Finder is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has registered without parental consent, contact us immediately at [email protected] and we will delete the account promptly.

Users between 13 and 17 may use the platform with verifiable parental or guardian consent, as described in our Terms & Conditions.

9. Security

We take reasonable technical and organizational measures to protect your data, including:

• All data in transit is encrypted via HTTPS/TLS.
• Passwords are hashed using industry-standard algorithms — we cannot recover your password.
• Database access is restricted to authorized personnel via Supabase row-level security policies.
• Uploaded files are stored in access-controlled cloud storage buckets.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Reviewed" date above and, where feasible, notify users via in-app notification or email. Your continued use of the Services after changes take effect constitutes your acceptance of the revised policy.

For significant changes that affect how we use your data, we will provide at least 30 days notice before the change takes effect.

11. Contact Us

For privacy questions, requests, or concerns:

• Privacy requests: [email protected]
• General inquiries: [email protected]
• Legal & compliance: [email protected]

We aim to respond to all privacy-related inquiries within 5 business days.