Privacy Policy

1. Information We Collect

1.1 Log Data (Server Logs)

When you visit our website, our servers automatically log certain information. This includes:

• IP address - Your Internet Protocol address used to identify your device and approximate location
• Browser type and version - Information about your web browser
• Operating system - Your device operating system
• Access timestamps - Date and time of your visit
• Requested pages - URLs of pages you access on our site
• HTTP status codes - Response codes for your requests
• Referring URLs - Pages that led you to our site

These logs are used for security monitoring, abuse detection, performance optimization, and legitimate interest tracking as described below.

1.2 User-Provided Information

We collect information you provide directly to us, such as:

• Account registration information (email, username)
• Strain contributions and reviews
• Contact form submissions
• API usage data (for registered users)

2. How We Use Your Information

2.1 Log Data Processing

We process server log data under Legitimate Interest (Article 6(1)(f) GDPR) for the following purposes:

• Security: Detecting and preventing unauthorized access, hacking attempts, and DDoS attacks
• Abuse prevention: Identifying and blocking malicious traffic patterns
• Performance monitoring: Analyzing server load and optimizing response times
• Analytics: Understanding website usage patterns and popular content
• Troubleshooting: Debugging technical issues and service errors

2.2 Analytics

We may use aggregated and anonymized log data to analyze:

• Total number of visitors and page views
• Geographic distribution of visitors (country/region level only)
• Popular strains and categories
• API usage statistics

We do not use third-party tracking cookies or advertising platforms. Analytics are conducted using our own server logs only.

3. Data Retention

We retain log data for the following periods:

• Server access logs: 90 days maximum, then automatically deleted
• Security logs: 12 months for abuse investigation purposes
• User accounts: Retained until account deletion, plus 30 days grace period
• Contributions: Retained indefinitely unless you request deletion

4. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted HTTPS connections (TLS 1.2+)
• Access controls and authentication for server infrastructure
• Regular security updates and patching
• Firewall and intrusion detection systems

5. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your account and data
• Right to data portability: Receive your data in a structured format

To exercise these rights, please contact us at info@azzitech.io or visit our contact page.

6. Cookies

We use minimal cookies for:

• Consent storage: Remembering your cookie consent choice
• Session management: Maintaining logged-in state for registered users
• Language preference: Remembering your selected language

We do not use advertising or tracking cookies. You can manage your cookie preferences through our cookie consent banner.

7. Third-Party Services

We use the following third-party services:

• Supabase (Database): Hosted database service. Their privacy policy applies to data stored there.

We do not share your personal data with any advertising or analytics services.

8. Contact Information

For privacy-related inquiries, contact us:

• Email: info@azzitech.io
• Location: Edling, Germany (Breitbrunn 5D, 83533 Edling)

9. Media Content and Image Rights

When you submit images or videos to StrainDB, this data is processed and stored:

Processing of media content:

• Uploaded images/videos are stored on our servers
• Image metadata (filename, size, upload date) is logged
• Optional: Uploader IP address is temporarily stored for security purposes

Your rights regarding media content:

• You can request deletion of your uploaded media
• You have the right to information about the processing of your media

External image processing:

We may use cloud-based services for image optimization and storage. These process media content according to their own privacy policies.