Privacy Policy

Last updated: June 2026

1. Controller

HoneyBear Tech e.U. (Martin Behrens), Österreich

Kontakt: hello@ladybug.cc

2. Data we collect

  • Email address (on registration/login)
  • Display name (optional)
  • Notification preferences (races, categories, riders)
  • Payment data (via Paddle — we never store card data ourselves)
  • Technical logs (IP, browser, timestamps) for security and error analysis

3. Purpose of processing

  • Provision of the Ladybug service
  • Sending race notifications by email or Telegram
  • Subscription management (paid plans)
  • Service improvement

4. Legal basis

Processing is based on Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(a) GDPR (consent), and Art. 6(1)(f) GDPR (legitimate interests).

5. Third-party services

  • SupabaseDatabase and authentication (EU servers)
  • VercelWeb frontend hosting
  • ResendEmail delivery
  • PaddlePayment processing (Merchant of Record)
  • TelegramOptional notifications (only when Telegram is connected)

6. Data sharing

We do not share your data with third parties except the processors named above, who are necessary to provide the service, or when required by law.

7. Your rights

  • Access to stored data (Art. 15 GDPR)
  • Correction of inaccurate data (Art. 16 GDPR)
  • Deletion of your data (Art. 17 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)
  • Complaint to the supervisory authority (DSB Austria)

To exercise your rights, contact: hello@ladybug.cc

8. Data retention

Account data is deleted when you delete your account or after 2 years of inactivity. Technical logs are automatically deleted after 90 days.