Privacy policy

Controller

The site's owner is the data controller. Privacy enquiries: christian@matchingvisions.com.

What we collect

When you create an account we store your name, email address and, with Google sign-in, the identifier and profile picture Google provides. With email sign-in we store your password only as a salted hash.

While you use the site we store Massi transactions (check-ins, redeemed codes, raffle tickets and refunds), invite links and the accounts created through them, and raffle wins.

We do not store IP addresses and we use no tracking or advertising cookies. Signing in uses one strictly necessary session cookie.

Why we process it

Data is processed to perform our agreement with you: to run your account, compute your Massi balance, draw raffles and deliver prizes. To prevent invite abuse we compare the display names of an inviter and their friend; this is a legitimate interest.

Who sees your data

Public pages (winners, participants) show other people only a masked name. Your own name is shown in full only to you. Staff see full details in the admin panel.

Data is processed by these providers: Vercel (hosting and image storage), Neon (database) and Google (sign-in, if you use it). Data is never sold or handed over for marketing.

Retention and your rights

Data is kept for as long as your account exists. You can ask for your account and data to be deleted, corrected, or exported by contacting christian@matchingvisions.com. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman.