Privacy Policy — MyBreederLine
Version 1.1 · effective from 2026-11-05
§ 1. Controller
- The controller of Users’ (breeders’) personal data is Wojciech Derda, correspondence address: ul. Orla 47 m 21, 75-727 Koszalin, Poland.
- The Provider operates as a natural person under Polish non-registered business rules where applicable. VAT ID / CEIDG details will be added after any formal registration.
- No DPO has been appointed — contact the controller directly.
- Privacy contact: privacy@mybreederline.pl
- Product support: support@mybreederline.pl
§ 2. What we process
| Category | Examples | Purpose | GDPR basis |
|---|---|---|---|
| Account data | email, password hash (at Auth provider), display name, locale, cattery name | registration, login, profile | Art. 6(1)(b) |
| Breeding data | cats, matings, litters, weights, photos | providing the Service | Art. 6(1)(b) |
| Billing | Stripe customer/subscription IDs, status, plan | Pro subscription | Art. 6(1)(b), (c) |
| Legal acceptances | timestamp + document versions | contract evidence / compliance | Art. 6(1)(b), (c), (f) |
| Technical logs | IP, user-agent, error diagnostics (e.g. Sentry) | security, reliability | Art. 6(1)(f) |
| Product analytics | in-app events (e.g. PostHog), if consented | product improvement, funnel | Art. 6(1)(a) |
| Support | email contents of requests | customer support | Art. 6(1)(b), (f) |
§ 3. Recipients / processors
We use trusted providers, including:
- Supabase — Auth, Postgres, Storage
- Vercel — hosting
- Stripe — payments
- Resend — transactional email (when enabled)
- Sentry — error monitoring
- PostHog — product analytics (only after analytics cookie consent)
Providers may process data in the EEA or third countries with GDPR-appropriate safeguards when required.
§ 4. Retention
- Account and breeding data — for the life of the Account plus periods needed for claims/legal duties after deletion (often up to 6 years for billing records where required).
- Security/diagnostic logs — for as long as needed for the purpose (typically months).
- Analytics data — per tool retention and until consent is withdrawn / data deleted.
- After permanent Account deletion, data is deleted or anonymized from active systems, subject to backups and legal holds.
§ 5. Your rights
You may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (where consent is the basis). You may lodge a complaint with a supervisory authority (in Poland: PUODO).
Requests: privacy@mybreederline.pl. We verify identity first.
In-account (Settings) you can download a JSON export of your breeding data. A full ZIP with photos will follow in later versions. Other GDPR requests are handled by email within statutory timelines.
§ 6. Cookies
See the Cookie Policy. Necessary cookies (Auth session) are required. Analytics runs only with consent.
§ 7. Security
We use HTTPS, per-account data isolation (RLS), server-only secrets, and error monitoring. No system is perfectly secure — use a strong password.
§ 8. Children
The Service is for adults running a cattery/business. It is not directed at children.
§ 9. Changes
Material changes will be announced in the Service and/or by email. The current version is always available at this URL.