Privacy Policy

Bibrary (“Bibrary”, “we”, “us”) aggregates publicly listed running races in Belgium and lets you save and rate them. This policy explains what personal data we process, why, and the rights you have under the EU General Data Protection Regulation (GDPR). Bibrary is operated from Belgium; for any privacy request, contact us at nicobourgpt@gmail.com.

Data we collect

• Account data. When you create an account we store your email address, an optional display name, and an account role. If you sign in with Google, we receive your email address and basic profile name from Google to create that account — nothing else.
• Saved races. The races you add to “My Calendar” are stored against your account so they sync across devices.
• Ratings and comments. If you rate or comment on a race, we store that content together with your account identifier.
• Usage analytics. With your consent, we collect anonymous-leaning product analytics (pages viewed, searches, feature use) to improve the service. We also keep a first-party event log of key actions.
• Technical data. We process limited technical data (such as error reports and server logs) to keep the service secure and working.

Why we use it and our legal basis

• To provide the service (accounts, saved races, ratings) — performance of our agreement with you and our legitimate interest in running Bibrary.
• Analytics — your consent, which you give via the cookie banner and can withdraw at any time.
• Security and troubleshooting — our legitimate interest in a safe, reliable service.

Cookies and analytics

Product analytics are not initialised until you accept them in the consent banner. Until then we do not load third-party analytics cookies. You can decline without losing access to the core service.

Service providers we share data with

We do not sell your personal data. We share it only with the processors that run Bibrary, each bound to protect it:

• Supabase — database and authentication (EU-hosted).
• Vercel — application hosting.
• Google — only if you choose “Continue with Google” sign-in.
• Resend — transactional email (sign-in and account emails).
• PostHog — product analytics, EU-hosted, only after consent.
• Sentry — error monitoring.

Where a provider processes data outside the EU, it does so under GDPR transfer safeguards such as Standard Contractual Clauses.

How long we keep it

We keep account data for as long as your account exists. If you delete your account, we delete the personal data associated with it, except where we must retain limited records to meet legal obligations. Aggregated, non-identifying statistics may be kept.

Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data; ask us to restrict or stop certain processing; request a copy of your data in a portable format; and withdraw consent at any time. To exercise any of these, email nicobourgpt@gmail.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, dataprotectionauthority.be).

Children

Bibrary is not directed at children under 16 and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above.

Contact

Questions about this policy or your data? Email nicobourgpt@gmail.com. See also our Terms of Service.