Privacy Policy

1. Who We Are

NBD Finder, LLC ("NBD Finder," "we," "our," or "us") operates the NBD Finder platform — a community-driven map for discovering skate spots, placing bounty challenges, and claiming rewards for documented trick landings. We are headquartered in the United States.

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website and platform (collectively, the "Services"). By using the Services you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: email address, username, password (stored as a secure hash — we never see your plain-text password).
• Profile details: display name, home city, age, bio, and profile photo you choose to upload.
• Spot submissions: spot name, description, location coordinates, obstacle details, and photos you upload.
• Bounty challenges: trick name, obstacle, challenge amount, and any special requirements you set.
• Claim submissions: video proof (YouTube/Vimeo URL or uploaded file), and any optional notes you include with a claim.
• Forum posts & comments: text content, channel, and timestamps of anything you post.
• Payment information: processed by Stripe — we never see or store your full card number. See Section 4.

2.2 Information Collected Automatically

• Device & browser: browser type, operating system, screen resolution, and language preferences.
• Usage data: pages visited, features used, buttons clicked, and session duration.
• IP address: used for fraud detection, approximate geolocation (city/region level), and rate limiting.
• Log data: error reports and performance metrics from our infrastructure provider.

2.3 Location Information

When you submit a new spot, we record the latitude/longitude of that pin. The map displays your current location on-screen for navigation — this is processed locally in your browser and is not stored on our servers unless you attach it to a spot submission.

2.4 Content You Upload

Photos and video files uploaded to NBD Finder are stored in our cloud storage (Supabase Storage). These files may be publicly accessible to other users if attached to a public spot or claim. Uploaded claim videos are only visible to platform administrators during the review process.

3. How We Use Your Information

We do not use your information for automated profiling or decision-making that produces legal or similarly significant effects.

4. How We Share Your Information

We do not sell your personal data. We share it only in these circumstances:

4.1 Service Providers

4.2 Public Information

Content you submit as public — including spot names, descriptions, photos, and forum posts — is visible to all users of the platform. Your username is displayed alongside your submissions. Spot location coordinates are shown on the public map.

4.3 Legal Disclosures

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If NBD Finder is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction. We will notify users of any material change in ownership or data handling practices.

5. Cookies, Local Storage & Tracking

5.1 Essential (Always On)

5.2 Analytics, Advertising & Diagnostics

We use the following third-party services that may set cookies or similar technologies:

5.3 Your Consent & Choices

The first time you visit NBD Finder, we display a cookie consent banner where you can Accept All, Reject Non-Essential, or Customize your preferences by category. You can change your choices any time by clicking "Cookie Preferences" in the page footer.

For users in the EEA, United Kingdom, and Switzerland, non-essential cookies are not set until you affirmatively consent. For users in California, we honor the Global Privacy Control (GPC) signal as a valid opt-out request for the sale or sharing of personal information.

You can also clear cookies and local storage at any time through your browser settings. Clearing your session cookie will log you out of the platform.

6. Data Retention

• Active accounts: data is retained for as long as your account remains active.
• Deleted accounts: profile and personal data (email, bio, city, age, avatar) are deleted immediately upon account deletion. Public content you created (spots, forum posts) is anonymized — your username and attribution are removed, but the content itself may be retained for platform integrity.
• Soft-deleted spots: spots moved to the admin trash are permanently deleted after 30 days.
• Claim videos: uploaded claim video files are deleted within 90 days of a claim being resolved (approved or denied), unless required for dispute resolution.
• Forum posts: retained while your account is active. Deleted posts are removed immediately from public view.
• Legal hold: data may be retained longer if required by law or for active legal proceedings.

7. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data. To exercise any of these, contact us at [email protected].

7.1 Rights for All Users

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: delete your account directly from your account settings (Settings → Account → Delete Account), or email us at [email protected]. Deletion is permanent and processed immediately.
• Portability: request your data in a structured, machine-readable format.
• Opt out of email notifications: toggle off Email Notifications in your account settings (Settings → Notifications), or use the one-click unsubscribe link at the bottom of any notification email.

7.2 EU / EEA Residents (GDPR)

You have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. Our lawful bases for processing are described in Section 3. For data processed on the basis of legitimate interest, you may object at any time.

7.3 California Residents (CCPA / CPRA)

California residents have the right to know what personal information is collected, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and to non-discrimination for exercising these rights.

7.4 "Do Not Sell or Share My Personal Information" (California)

NBD Finder does not sell your personal information for money. However, the use of advertising services such as Google AdSense may constitute "sharing" for cross-context behavioral advertising under the CPRA. California residents can opt out by any of these methods:

• Click the "Do Not Sell or Share My Personal Information" link in the page footer.
• Send a Global Privacy Control (GPC) signal from a supporting browser — we honor GPC as a valid opt-out.
• Email [email protected] with the subject "Do Not Sell or Share Request."

Opt-out applies prospectively and persists for as long as your browser retains the consent cookie or for 12 months, whichever is shorter, after which we may ask you to renew it.

7.5 Self-Service Data Requests

You can exercise the most common rights directly inside the app, without contacting us:

• Export My Data — Settings → Account → Export My Data downloads a machine-readable JSON archive of your account, profile, spots, posts, claims, and messages.
• Delete My Account — Settings → Account → Delete Account processes deletion immediately; public content is anonymized rather than removed to preserve platform integrity.
• Manage Email Notifications — Settings → Notifications.
• Manage Cookie Consent — "Cookie Preferences" in the page footer.

8. Children's Privacy

NBD Finder is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has registered without parental consent, contact us immediately at [email protected] and we will delete the account promptly.

Users between 13 and 17 may use the platform with verifiable parental or guardian consent, as described in our Terms & Conditions.

9. Security

We take reasonable technical and organizational measures to protect your data, including:

• All data in transit is encrypted via HTTPS/TLS.
• Passwords are hashed using industry-standard algorithms — we cannot recover your password.
• Database access is restricted to authorized personnel via Supabase's row-level security policies.
• Uploaded files are stored in access-controlled cloud storage buckets.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Reviewed" date above and, where feasible, notify users via in-app notification or email. Your continued use of the Services after changes take effect constitutes your acceptance of the revised policy.

For significant changes that affect how we use your data, we will provide at least 30 days' notice before the change takes effect.

11. Contact Us

For privacy questions, requests, or concerns:

• Privacy requests: [email protected]
• General inquiries: [email protected]
• Legal & compliance: [email protected]

We aim to respond to all privacy-related inquiries within 5 business days.