Privacy policy

About this policy

This policy explains how Gratze uses information when you visit our website, create a profile, use a band, or place an order. For privacy questions, contact info@gratze.net.

Information we handle

We handle account and sign-in information, the profile details and links you enter, uploaded photos and CVs, and records connecting your account to your band. Your account email is separate from the contact email you choose to share on your profile.

Orders include your name, contact details, delivery address, optional note, items, payment method, and fulfilment records. If you contact us, we also receive the information in your message. Our hosting and authentication providers may process technical information, such as IP addresses and request logs, to operate and protect the service.

How we use information

We use this information to provide your account and profile, authenticate access, connect and manage bands, fulfil orders, answer support requests, prevent abuse, and meet applicable record-keeping obligations. These purposes support providing the service you request, maintaining its security, and complying with applicable law.

You control your profile

• Public: people with your username link can view the fields you allow. Public pages may appear in search engines.
• Tap-only: your username page hides your profile. Your active band URL displays the fields you allow. Anyone with that URL can open it; a physical tap is not required.
• Private: your profile is hidden on both your username page and your band URL. You can still edit it in your dashboard.

Field visibility controls hide individual details without deleting them from your account. New profiles start in tap-only mode. Information someone has already saved, copied, or shared cannot be recalled by changing your settings. External links and externally hosted CVs remain subject to their own access settings.

Service providers & sharing

Supabase provides our authentication, database, and file storage. Hosting providers process requests to serve the website. Order fulfilment may require sharing delivery details with delivery providers. Authorised administrators access information needed to support accounts, manage bands, and fulfil orders. Information may also need to be disclosed where required by law.

Service providers may process information in countries other than your own. External websites you visit through profile links apply their own privacy policies.

Cookies & storage

Gratze uses cookies for sign-in sessions and access to order confirmations. These support essential account and checkout functions. Blocking them can prevent those features from working.

Keeping & removing information

Account information is retained while needed to operate your account. Order, band, support, and security records may need to be kept to fulfil orders, resolve disputes, prevent misuse, preserve band ownership history, or meet legal obligations. Retention depends on those purposes and the applicable requirements.

You can edit profile information and visibility in your dashboard. To request account deletion or removal of other information, email us. Some records may need to remain for the purposes above, and backup copies may persist until replaced through the provider’s backup cycle.

Your requests & rights

Contact us to request access to, correction of, or deletion of your information. Depending on applicable law, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent where processing relies on it, or complain to your data protection authority. We may verify your identity before handling a request.

Policy updates

We may update this policy as the service changes. The date above identifies the latest version. Contact us if you need help understanding a change.