Adatkezelési tájékoztató

Fruit Map (gyumolcsterkep.hu) is a community fruit-tree map service. This notice describes how we process personal data when you use the website and related services, in line with the GDPR and applicable law.

Data controller

Controller: Levente Bognár, natural person

Postal address: 9081, Magyarország

Email: leventebg93@gmail.com

The service is currently operated as a natural person. Formal business registration is planned; controller details will be updated on this page.

Data we process

  • Account and sign-in: email; password hash (email+password registration); Google account id (Google sign-in); login session
  • Profile (optional): profile picture (upload or from Google if you allow it); profile location (city/area); bio. Your display name on the site is derived from your email — we do not store a separate display name field.
  • Trees: location (coordinates), species, city/county (from geocoding), optional details and photos, who added the tree, likes
  • Comments: text, author, replies, likes
  • Community activity and notifications: event types and short summaries (e.g. who liked or commented, display name snapshot for notifications)

Purpose and legal basis

  • Account, login, providing the service — contract (GDPR Art. 6(1)(b))
  • Community features (map, trees, comments) — contract / legitimate interest (Art. 6(1)(b), (f))
  • Security and abuse prevention — legitimate interest (Art. 6(1)(f))
  • Legal obligations — legal obligation (Art. 6(1)(c))

Cookies

We use essential cookies and browser local storage only: login session (payload-token), locale preference, OAuth state (temporary), sessionStorage (e.g. add-tree draft, return path after sign-in). These stay on your device; we do not store your IP address in our database.

We do not use marketing or analytics cookies (e.g. Google Analytics, Facebook Pixel). If this changes, we will update this notice and ask for consent where required.

Processors

  • Hosting (e.g. Vercel, database provider)
  • Google LLC — OAuth sign-in (email; profile picture download if you allow it)
  • Object storage (e.g. AWS S3) — uploaded images

Processors act under their own privacy terms. External hosting and infrastructure providers are used to operate the service.

Retention

  • Account and profile data: while your account exists, then for a reasonable period after deletion
  • User content (trees, comments, photos): shown on the map and in the app with your display name (e.g. “Added by …”, comment author name) while your account is active, until you delete the content (or an operator removes it where applicable)

Your rights

  • Access, rectification, erasure, restriction, portability (where applicable)
  • Object to processing based on legitimate interest
  • Lodge a complaint with your supervisory authority (in Hungary: NAIH, naih.hu)

Contact

Privacy requests: leventebg93@gmail.com