Privacy Policy
Last updated: January 5, 2026
1. Data Controller
The controller responsible for data processing under GDPR:
- Gökay Yanartas
- Riedemannweg 15, 13467 Berlin, Germany
- Email: privacy@publicmag.net
2. Information We Collect
We collect information that you provide directly to us:
- Account information (email, name, password)
- Prompts and content you create
- Usage data and preferences
- Payment information (processed securely by our payment provider)
3. Legal Basis for Processing
We process your data on the following legal bases:
- Art. 6(1)(b) GDPR: Contract performance - to provide our service
- Art. 6(1)(f) GDPR: Legitimate interest - for security, abuse prevention, and service optimization
- Art. 6(1)(c) GDPR: Legal obligation - to comply with legal retention requirements
4. How We Use Your Information
- To provide and maintain our service
- To improve and personalize your experience
- To communicate with you about updates and support
- To ensure security and prevent abuse
5. Data Processors and Third Parties
To provide our service, we work with the following service providers:
- Supabase Inc. (USA): Database, authentication, and hosting
- Stripe Inc. (USA): Payment processing
These providers process data on our behalf and are subject to appropriate data protection agreements.
6. International Data Transfers
Some of our service providers are located in the USA. Transfers are made based on Standard Contractual Clauses (Art. 46(2)(c) GDPR) and supplementary technical measures to ensure an adequate level of protection.
7. Cookies and Local Storage
We only use strictly necessary cookies and local storage mechanisms:
- Authentication cookies: For secure login and session management
- Theme preference: Storage of your preferred display mode (light/dark)
- Language preference: Storage of your preferred language
We do not use tracking cookies, advertising cookies, or third-party analytics tools. Since only technically necessary cookies are used, separate consent is generally not required.
8. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right to access your personal data (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority
9. Data Retention
We retain your data for as long as your account is active or as required to comply with legal retention obligations. You can delete your account and all associated data at any time through your settings.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: