Privacy Policy – Larptree
Effective date: 19.08.2026 · larptree.com
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Individual Entrepreneur Darin Darwish
Identification Number (Georgia): 305840089
Registered on 23/02/2026 with the LEPL National Agency of Public Registry (Ministry of Justice of Georgia)
Address: 41 Zakaria Paliashvili Street, Entrance 1, Basement Floor, Tbilisi, Georgia
Email: darindarwish11@gmail.com
2. General Information on Data Processing
We process personal data of our users only to the extent necessary to provide a functioning platform and our content and services. Processing is based on Art. 6(1) GDPR, in particular:
(a) consent
(b) necessity for the performance of a contract (providing the user account)
(f) legitimate interest (e.g. IT security, fraud/abuse prevention)
3. Provision of the Service / Hosting
(1) Larptree is technically operated via the Lovable platform, which is used for hosting, provisioning, and delivery of the application.
(2) For database, authentication, and storage of user data, Larptree uses the Supabase Inc. infrastructure integrated by Lovable.
(3) When Larptree is accessed, technical access data (server log files) is automatically collected and stored for a limited period, including: IP address (possibly truncated), date and time of access, page/resource accessed, browser type and version, operating system used, and referrer URL. This serves the technical provision, stability, and security of the Service (Art. 6(1)(f) GDPR, legitimate interest).
(4) Data Processing Agreements (Art. 28 GDPR) exist or will be entered into with the providers named above and, where data is transferred to third countries (in particular the US), EU Standard Contractual Clauses (SCCs) apply.
4. Registration and User Account
(1) Use of certain features requires registering an account. We collect at least: email address, self-chosen username, password (stored encrypted).
(2) Additional information may optionally be provided (e.g. profile picture, display name, description text, links).
(3) The legal basis is the performance of the usage agreement (Art. 6(1)(b) GDPR).
(4) Data provided at registration is stored for the duration of the user account and deleted within 30 days of account deletion, unless statutory retention obligations require otherwise.
5. Public Profile Page
(1) Content that the user deliberately publishes via their account (username, display name, profile picture, description text, added links) is publicly visible to any visitor of the profile page once it is published.
(2) Users should therefore not publish any data they do not wish to make publicly visible. The legal basis is the user's own decision/consent to publish (Art. 6(1)(a) or (b) GDPR).
6. Click and Usage Statistics
*(Placeholder — depends on the final technical implementation.)*
If we provide users with aggregated statistics on views of their profile page or clicks on individual links, this is generally done in an anonymized or pseudonymized form (e.g. simple counts without identifying visitors). If cookies or comparable technologies are used for this, it will be separately described before activation and, where required, visitor consent will be obtained (see Section 7).
7. Cookies and Tracking
(1) Larptree currently does not use third-party analytics or marketing cookies (e.g. Google Analytics, Meta/TikTok pixels). Only strictly necessary cookies/storage technologies are used (e.g. to maintain the login session); legal basis Art. 6(1)(f) GDPR and, where applicable, equivalent national e-privacy law.
(2) Should analytics or marketing tools be integrated in the future, this Privacy Policy will be updated accordingly and, where legally required, user/visitor consent will be obtained via a cookie-consent banner beforehand.
8. Contact
When you contact us by email, the information you provide (e.g. email address, name, message content) is stored to process your inquiry. Legal basis: Art. 6(1)(b) or (f) GDPR.
9. Recipients of Data / Disclosure to Third Parties
Personal data is disclosed to third parties only where:
necessary for the performance of the agreement (e.g. the hosting/infrastructure providers named in Section 3),
required by law,
the user has consented.
We do not sell personal data to third parties.
10. International Data Transfers
Where data is transferred to providers outside the EU/EEA (in particular the US, e.g. Lovable/Supabase infrastructure), this is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or an adequacy decision, where applicable.
11. Retention Period
Personal data is stored only for as long as necessary for the stated purposes, or for as long as statutory retention periods apply. Data is deleted or anonymized once the purpose no longer applies or the retention period expires.
12. Data Subject Rights
Data subjects have the following rights under the GDPR:
Right of access to their stored data (Art. 15 GDPR)
Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing based on legitimate interest (Art. 21 GDPR)
Right to withdraw consent with future effect (Art. 7(3) GDPR)
To exercise these rights, an informal message to darindarwish11@gmail.com is sufficient.
13. Right to Lodge a Complaint
Data subjects have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of their habitual residence, place of work, or the place of the alleged infringement.
14. Data Security
We implement appropriate technical and organizational measures to protect personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access (including encryption of transmission via TLS/SSL and access restrictions).
15. Language Versions and Changes
(1) This Privacy Policy is available in English and German ("Datenschutzerklärung"). In the event of any inconsistency, the English version shall prevail.
(2) We reserve the right to amend this Privacy Policy to reflect changes in the law or changes to the Service or its data processing. The current version is available at larptree.com/privacy.
Effective date: 19.08.2026