This Privacy Policy explains what data the Halloween Nesselande app collects,
why it is collected, who it is shared with, and the rights you have over it.
The app is published from the Netherlands and is subject to the EU General
Data Protection Regulation (GDPR), with additional disclosures required by
Google Play and the Apple App Store.
1. Data controller
Halloween Nesselande is a free, non-commercial hobby project I run on my
own for the Nesselande neighbourhood. For any privacy question, or to
exercise the rights listed in section 6, please email
[email protected].
2. Data we collect
The app only collects what it needs to work. Each item below lists what it is, why we collect it, and the source.
- Precise location (GPS): to show nearby houses and scare zones on the map. Source:
ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION.
- Photos and videos: user-submitted media of houses or scare zones. Source:
READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, CAMERA.
- House address & number: to pin a house on the map. Source: the “Add House” form.
- Mobile phone number (optional): to coordinate with house owners; never shown publicly. Source: the “Add House” form.
- Scare zone name, theme and explanation: to list the zone. Source: the “Add Zone” form.
- Firebase Cloud Messaging (FCM) token: to send push notifications. Source: the push-notifications module.
- Device and diagnostic data: crash and delivery diagnostics. Source: Firebase SDKs.
- IP address: inherent to any HTTP request. Source: the networking layer.
3. Why we process it (legal basis)
For every purpose we rely on one of the legal bases set out in GDPR Art. 6:
- Consent: for push notifications, camera and photo access, and precise location. You can withdraw this consent at any time in your device settings.
- Contract / pre-contract:when you submit a house or scare zone you want listed in the app.
- Legitimate interest: for security, abuse prevention and basic diagnostics needed to keep the app stable.
4. Who receives your data
We share data only with the processors required to run the service:
- Google Firebase (Google Ireland Ltd. / Google LLC): Cloud Messaging, and Crashlytics / Analytics where enabled.
- Google Play Services: required for FCM delivery on Android.
- Our backend hosting provider: to store submissions and serve them to other users.
- Our maps provider: to render the map of houses and scare zones.
Some of these processors may transfer data outside the European Economic
Area. Where that happens we rely on the European Commission’s Standard
Contractual Clauses or an applicable adequacy decision as the transfer
safeguard.
5. How long we keep it
- Submitted house and zone media: kept until the owner asks for removal, or removed during the seasonal cleanup after Halloween.
- FCM tokens: deleted when you uninstall the app or opt out of notifications.
- Backups: kept on a short rolling window only.
6. Your rights
Under GDPR Articles 15–22 you have the right to:
- Access the personal data we hold about you;
- Have it rectified or erased (the “right to be forgotten”);
- Restrict or object to processing;
- Receive a portable copy of your data;
- Withdraw any consent you previously gave, at any time;
To exercise any of these, email
[email protected].
7. Children
Halloween Nesselande is not directed at children under 16, which is the
minimum age for consent under GDPR in the Netherlands. Where the app is
used in jurisdictions with a lower threshold (such as 13 under the US
COPPA rules), parental consent is required.
8. Security
All traffic between the app and our servers is encrypted in transit (HTTPS).
Backend access is restricted to authorised maintainers, and every submitted
photo or video is reviewed by an administrator before it becomes visible to
other users.
9. Changes to this policy
We will publish any updates at this same URL and update the “Last
updated” date at the top of the page. For material changes we will
also notify users inside the app.
← Back to home