Privacy Policy

Who is responsible

The controller of your personal data is Kocsmarszky Zsolt, Hungary.

Contact: Kocsmarszky Zsolt, 1039 Budapest, Lukács György utca 18. 5/16, Hungary · hello@poolplanner.app

What is collected, and why

If you never sign in, no personal data is collected about you at all. Your design lives in your own browser.

If you sign in, the following is stored:

• Your email address — so the sign-in link has somewhere to go and so an account can be recognised. Legal basis: performance of a contract (providing the account you asked for).
• A display name, derived from your address by default and changeable by you — shown beside a design you publish. Legal basis: contract.
• The designs you save, and whether you published them. Legal basis: contract.
• Which designs you upvoted — so one account counts once. Legal basis: legitimate interest in a ranking that means something.
• The date you accepted these terms, and which version. Legal basis: legal obligation and legitimate interest in being able to show what was agreed.
• A hashed, non-reversible identifier for a design view, so a view count cannot be trivially inflated. This is not an IP address and cannot be turned back into one. Legal basis: legitimate interest.

Cookies and local storage

Strictly necessary, always on: a signed session cookie once you sign in; your language preference; and the design you are working on, kept in your browser's local storage so a refresh does not lose it. None of these are used to track you, and none are shared.

Analytics, only if you agree: product analytics that tell us which pages and features are used. These are off until you accept them in the consent banner, and you can change your mind at any time through “Cookie settings” in the footer.

There is no advertising, no ad network, no third-party pixel and no cross-site tracking anywhere in this service.

Who else processes it

These providers process data on our behalf, under contract:

• Vercel Inc. — hosting and delivery (EU and US).
• Neon Inc. — the database that stores accounts and designs (EU).
• Resend — sending the sign-in link (EU and US).
• PostHog — product analytics, only with consent (EU).

How long it is kept

Account data and designs are kept until you delete your account or ask us to remove them. Sign-in links expire after fifteen minutes and are single-use. Consent records are kept for as long as the account exists, because their purpose is to evidence what was agreed.

Your rights

Under the GDPR you may ask for a copy of your data, ask for it to be corrected or deleted, object to or restrict processing, withdraw consent where processing rests on it, and ask for your data in a portable form. Write to the address above and we will answer within a month.

You may also complain to a supervisory authority. In Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Budapest.

If you are in the United States

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act as amended. We have never done so.

California residents may request to know what personal information is held, request its deletion or correction, and are entitled not to be discriminated against for exercising those rights. Residents of other US states with comparable laws have comparable rights. Use the contact address above; we will verify the request against the email address on the account.

Data is processed in the European Union and, where a provider named above operates in the United States, transferred under that provider's standard contractual clauses.

Children

The service is not directed at children and accounts are not knowingly created for anyone under 16. If you believe a child has an account here, write to us and it will be removed.

Changes

This policy was last changed on 12 September 2026. If it changes substantively it will be dated again here.