DateSpots · Legal
Privacy Policy
Last updated: 10 September 2026
This policy explains what personal data DateSpots collects, why, and the rights you have over it under the GDPR.
Who we are
De Bruine Solutions, a sole proprietorship (eenmanszaak) based in Amsterdam, Netherlands, is the controller of your personal data. Our full registered details are in the Imprint. Contact: privacy@datespots.net.
What we collect
Account information (email, and a phone number used to verify reviewers); the content you post (reviews, photos, saves, plans); device and usage data (including the requests you make, the pages and places you view, and your device’s IP address); and approximate location to show you nearby places.
How we use it
To run and secure the service, verify that reviews come from real visits, personalise your city and recommendations, keep the community safe, and measure what’s working. We do that with the analytics systems described in “Analytics” below: an always-on, first-party usage log we run ourselves, and an optional analytics tool (PostHog) that only run if you choose “Accept all” in the cookie banner.
Legal bases (GDPR Art. 6)
Performance of our contract with you (your account and its features); our legitimate interests (safety, fraud prevention, and improving the product through our first-party analytics and personalised recommendations, which you can opt out of); legal obligations; and your consent (for the PostHog tool and for any marketing).
Analytics
We use two systems. (1) First-party usage analytics: our own server records events such as page, city and venue views, searches, saves, check-ins and reviews. Each event stores an anonymous session identifier, the request’s IP address, the browser or app your device identifies itself as (its “user agent”), an approximate country and city derived from it, and — if you are signed in and have not turned personalisation off — your account id. This runs under our legitimate interest to keep the product safe and improve it; you can stop us linking it to your account any time in Settings → Privacy, and we keep collecting it anonymously. These raw events are automatically deleted after 18 months. It is never used for advertising and never sold. (2) PostHog product analytics: a third-party tool, hosted in the EU (eu.i.posthog.com), that helps us understand how features are used. It loads and captures only after you choose “Accept all”, records interaction events and identifiers (and, once you are signed in, associates them with your account to de-duplicate usage), and is never used for cross-company advertising or ad targeting. You can withdraw consent any time via the cookie banner or by clearing the “cookie_consent” cookie.
Sharing
We do not sell your personal data. We share it only with processors that run parts of the service for us — hosting, email, SMS, error monitoring, and (with your consent) PostHog for EU-hosted product analytics — under data-processing agreements, and where required by law.
Retention
We keep account data while your account is active. Raw first-party analytics events are deleted automatically after 18 months. Public reviews may remain as community content per the Terms of Use after you leave, unless you ask us to remove them. Audit and legal records are kept as long as required.
Your rights
You can access, correct, erase, export, restrict, or object to the processing of your data, and withdraw consent at any time. Use Settings → Privacy, or email privacy@datespots.net. You can also complain to the Dutch DPA (Autoriteit Persoonsgegevens).
To delete your account entirely, see the Account deletion page at datespots.net/account-deletion — it explains the in-app route, the 30-day grace period and exactly what is removed.
International transfers
Where a processor is outside the EEA, we rely on EU Standard Contractual Clauses or an adequacy decision to protect your data.
Cookies
We use cookies as described in our Cookie Policy. Non-essential cookies fire only with your consent.
Contact
Privacy questions or requests: privacy@datespots.net.