1. Data Controller

The data controller is Serendip Moments, accessible at serendipmoments.com.

Contact: contacto@serendipmoments.com

2. Data We Collect

Data you provide directly:

• Email address (required to create an account).

• Username or real name (if you choose to provide it).

• Content you publish: texts, descriptions, titles and dates of your moments.

• Photographs you voluntarily upload.

• Geographic location (latitude and longitude), which you select on the map yourself.

Technical data collected automatically:

• IP address and browser type (for security and diagnostics only).

• Technical session cookies required for login.

3. Purpose of Processing

We process your data to:

• Allow you to create an account and access the platform.

• Display your moments on the map at the location you indicate.

• Manage the coincidence matching system between users.

• Send you in-platform notifications.

• Ensure security and proper functioning of the service.

4. Legal Basis

Processing is based on performance of the user contract (Art. 6.1.b GDPR) and, where applicable, your explicit consent (Art. 6.1.a GDPR).

5. Third-Party Service Providers

• Supabase (supabase.com): database and authentication, hosted on EU servers.

• Google OAuth: Google sign-in.

• LucusHost: web hosting.

6. Data Retention

We retain your data while your account is active. Upon deletion request, we will remove your data within 30 days.

7. Your Rights

You may exercise at any time: access, rectification, erasure, objection, portability and restriction of processing.

Contact: contacto@serendipmoments.com

You may also lodge a complaint with your local data protection authority.

8. Minors

Serendip is not intended for users under 16. We do not knowingly collect data from minors.

9. Changes to This Policy

Significant changes will be notified through the platform. The last updated date will always be visible at the top.