Privacy Policy

How we process your data under the EU GDPR.

Controller

Data controller: Cenk Yavuz, info@istadi.com. Contact us at this address with any questions.

What data we process

Account: your e-mail address (for magic-link sign-in).
Profile: optional profile and roommate-matching information you provide.
Usage: privacy-friendly, cookieless analytics (Plausible) and error monitoring (Sentry).
Contact: the content of forms/e-mails you send us.

Why and on what legal basis

We process data to provide the service, manage your account, and improve the site (performance of a contract and legitimate interest; consent where consent is requested for analytics).

Service providers

For infrastructure and features: Vercel (hosting), Supabase (database), Resend (e-mail), Sentry (errors), Plausible (analytics), Cloudflare (DNS/CDN). These providers process data only on our behalf.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. To exercise them, write to info@istadi.com. You also have the right to lodge a complaint with a supervisory authority.

Retention

We keep data only for as long as necessary or as required by legal obligations.