Privacy Policy

Last updated on: 2026.08.15

1. Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information when you visit our website.

2. Data We Collect

We collect and process only the data necessary to ensure the functionality and improvement of our website.

a. Essential data (always active)

These cookies and technical records are required for the basic operation and security of the website. They are always active and do not require your consent, as they are necessary to provide the online service you have requested. This category includes:

• cookies that store your cookie consent preferences
• session cookies, which keep you logged in while you navigate the site
• web server technical logs, which are collected automatically as part of standard internet communication. These logs may contain IP addresses and browser identifiers and are used exclusively for security monitoring and troubleshooting. They are kept for a limited time and are not linked to any other data or used for analytics.
• data collected by Google reCAPTCHA v3 on sign-in forms to protect against automated abuse. reCAPTCHA collects hardware and software information (such as device and browser data) and sends it to Google for bot-detection analysis.

b. Analytics data (optional)

If you give consent, we use Google Analytics 4 to better understand how visitors use our website. The collected information includes:

• pages visited
• time spent on each page
• approximate geographic region (not precise location)
• type of device and browser

We use IP anonymization in Google Analytics, so your full IP address is never stored or processed by Google for analytics purposes.

c. Account and activity data (when you sign in)

If you choose to sign in using Google or Facebook, we receive the following information from those providers:

• your display name
• your email address

This data is stored in encrypted form and cannot be decrypted — it is used only to identify your account on return visits. We also store your activity interactions (activities you mark as "Saved", "Liked", "Disliked", or "Tried") to provide the personalisation features of the website.

You may delete your account and all associated data at any time using the "Delete account" button on your account settings page. This immediately and permanently removes your account and associated data. If you have any trouble with this, you can also contact us at support@doinfreetime.com.

We also store your account settings and preferences, such as interface options and your self-declared confirmation that you are 18 years of age or older. These are deleted together with your account.

d. Activity reports

If you use the “Report an error” feature on an activity page to flag incorrect or inappropriate content, we store the reason(s) you selected, any additional details you provide, and a non-reversible hash of your IP address (used to prevent abuse of the reporting feature). This information is used solely to review your report.

e. Activity suggestions

If you use the “Suggest activity” feature to propose a new activity, we store the name and optional description you provide, the language of the website you used at the time, and a non-reversible hash of your IP address (used to prevent abuse of this feature). If you are signed in, we also link the suggestion to your account. This information is used solely to review and consider your suggestion.

f. Bug reports

If you use the “Report a bug” feature, we store the description you provide, the language of the website you used at the time, and a non-reversible hash of your IP address (used to prevent abuse of this feature). If you are signed in, we also link the report to your account. If you choose to attach a screenshot, the image file, its original filename, and its file type are stored on our servers; please avoid including personal or sensitive information in screenshots you submit. This information is used solely to investigate and resolve the reported issue.

3. Managing Cookies and Consent

When you visit our website for the first time, a cookie consent banner appears. You can choose which types of cookies to allow. Analytics cookies are used only after you consent.

You can review or change your preferences at any time by clicking this button: Manage cookie preferences

4. Legal Basis

• Essential cookies: legitimate interest (website functionality) (Article 6(1)(f) of the GDPR)
• Analytics cookies: consent (Article 6(1)(a) of the GDPR)
• Account data (name, email): contract — necessary to provide the sign-in functionality you requested (Article 6(1)(b) of the GDPR)
• Activity interaction data: legitimate interest — necessary to provide personalised features such as your saved lists (Article 6(1)(f) of the GDPR)
• reCAPTCHA data: legitimate interest — necessary to protect the website from automated abuse and bots (Article 6(1)(f) of the GDPR)
• Activity report data: legitimate interest — necessary to review flagged content and prevent abuse of the reporting feature (Article 6(1)(f) of the GDPR)
• Activity suggestion data: legitimate interest — necessary to review submitted suggestions and prevent abuse of this feature (Article 6(1)(f) of the GDPR)
• Bug report data: legitimate interest — necessary to investigate reported issues and prevent abuse of this feature (Article 6(1)(f) of the GDPR)

5. Data Retention

• Essential cookies: stored only as long as necessary for functionality
• Analytics data: stored by Google for up to 14 months, as configured in Google Analytics settings
• Account data and activity interactions: retained for as long as your account is active; deleted upon account deletion request
• Activity reports: retained until reviewed and resolved by our support team, after which they are deleted.
• Activity suggestions: retained until reviewed by our team, after which they are deleted.
• Bug reports (including any attached screenshot): retained until the issue is resolved, after which they are deleted.

6. Third-Party Services

We use Google Analytics 4 provided by Google LLC. Google may process anonymized usage data on our behalf.

You can learn more in Google's Privacy Policy: https://policies.google.com/privacy

We use Google reCAPTCHA v3 (provided by Google LLC) on our sign-in forms to protect against bots and automated abuse. reCAPTCHA analyses browser behaviour and device information and sends it to Google to generate a risk score. No personal data collected by reCAPTCHA is stored by us or used for advertising purposes. This service is governed by Google's Privacy Policy and Terms of Service: https://policies.google.com/privacy, https://policies.google.com/terms

We also offer sign-in via Google Sign-In and Facebook Login (provided by Meta Platforms, Inc.). If you use either option, the respective provider processes your authentication. You can learn more in Meta's Privacy Policy: https://www.facebook.com/privacy/policy/

7. Your Rights (Under the GDPR)

Under the GDPR, you have the right to:

• access your personal data
• request correction or deletion
• withdraw consent at any time
• file a complaint with your local Data Protection Authority

8. Users Outside the European Union

For visitors from countries outside the European Union, including the US, India, and China, please note that our data collection practices are designed to comply with EU regulations. We apply EU GDPR standards as our baseline for all users regardless of location. If your local law provides additional protections, you are welcome to contact us to exercise any rights available to you.

9. Contact

If you have questions about this policy or data processing, please contact us at support@doinfreetime.com