This English version is provided for convenience. If there is any difference, the German version applies.
1. Controller
[DEIN VOLLSTÄNDIGER NAME], [STRASSE UND HAUSNUMMER], [PLZ UND ORT], Germany. Email: ownumber@gmail.com
2. What data we process
- Account: email address, password (encrypted only), username, time of registration.
- Security: your 6-digit PIN (stored only as a hash, so it cannot be read), failed attempts and, if two-factor sign-in is enabled, a secret key for the authenticator app.
- Market data: your numbers, bids, offers, purchases and sales, and your play-money balance.
- Technical: when you open the site, your IP address, the time and browser information in our providers' server logs.
3. What is public
Ownumber is transparent on purpose. Your username, your numbers, your bids and all purchases and sales with price and time are public. Your email address, balance, offers and notifications are not public. If you don't want to reveal your real name, choose a username that doesn't contain it.
4. Purposes and legal bases
- Providing your account and the marketplace (Art. 6(1)(b) GDPR, contract).
- Protection against misuse, e.g. PIN lockout and two-factor sign-in (Art. 6(1)(f) GDPR, legitimate interest in secure operation).
- Emails to confirm your account and to reset your password (Art. 6(1)(b) GDPR).
5. Service providers
- Supabase (Supabase Inc., USA): database and sign-in. The data is stored on servers in the EU (Stockholm, Sweden).
- Vercel (Vercel Inc., USA): delivery of the website. Vercel may process data in the USA; transfers are based on the EU-US Data Privacy Framework or standard contractual clauses.
- Google (Google Ireland Ltd.): sending system emails via Gmail.
Data processing agreements are in place or being concluded with all providers.
6. Cookies
We only use technically necessary cookies to keep you signed in and to remember your language. There is no tracking and no advertising.
7. Retention
We keep account data for as long as your account exists. The public sales history of a number is kept so that the price history stays traceable; after an account is deleted, its name there is replaced with "deleted account".
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, write to ownumber@gmail.com. You can also lodge a complaint with a data protection supervisory authority.