Privacy notice

This notice explains how personal data is processed. It is information, not a request for consent. Controller: Tóth Szabolcs (individual operator), Not yet supplied by the operator. Privacy contact: marketing@dive-seek.com. Data protection officer: Not yet supplied by the operator.

What we process, and why

• Account: email address, password (stored hashed by the authentication service) or Google sign-in identity; the date and version of the terms you accepted. Purpose: run your account. Legal basis: Not yet supplied by the operator. Retention: Not yet supplied by the operator.
• Profile (optional): username, display name, avatar, bio, country, certification and dive details you choose to add, and whether your profile is public.
• Photographs: the image files (kept in private storage; web copies are created in your browser with location/camera metadata stripped), title, caption, linked place or species, copyright holder, licence and your rights confirmation. Legal basis: Not yet supplied by the operator. Retention: Not yet supplied by the operator.
• Comments, ratings and reactions linked to your account.
• Reports and privacy requests: your email, optional name and message. Retention: Not yet supplied by the operator. Legal basis: Not yet supplied by the operator.
• Contact messages: the email, optional name, topic and message you send on the Contact page; a pseudonymous network fingerprint is kept to limit spam. Only staff can read them. They are saved in a private inbox, not emailed automatically. Retention: Not yet supplied by the operator. Legal basis: Not yet supplied by the operator.
• Usage statistics: anonymous, coarse events (for example "a destination page was viewed" or search-length buckets). No user or session identifiers, cookies, raw search text or URLs are stored. Legal basis: Not yet supplied by the operator. Retention: Not yet supplied by the operator.
• Natural-language search: the question you type is sent to an AI model to propose filters; it is not stored by DIVE-SEEK.

Service providers

• Hosting, database, authentication and file storage: Not yet supplied by the operator (the app runs on Lovable Cloud infrastructure; the operator must confirm the contracting entity and locations).
• Google — optional "Continue with Google" sign-in, and web fonts loaded from Google Fonts (your browser sends its IP address to Google when pages load).
• OpenStreetMap tile servers — map images on map pages (your IP address is sent when maps load).
• AI model provider via the Lovable AI gateway — natural-language search questions.

International transfers and safeguards: Not yet supplied by the operator.

Your rights

Depending on applicable law you may request access, correction, deletion, restriction, portability, or object to processing, and complain to a supervisory authority (Not yet supplied by the operator). You can edit your profile, and unpublish or delete your photographs and comments yourself at any time. For anything else use the privacy request form. Requests are reviewed by a person; some data may need to be kept for legal, security or dispute reasons, so deletion is not always immediate or complete.

Cookies and storage

See Cookies & storage.

Write to marketing@dive-seek.com about your privacy rights.