Privacy Policy

Effective: February 11, 2026

1. Introduction

RateMyFart ("we", "us", "our") is operated by Rok Garbas s.p., Rozna dolina, cesta XI 4, 1000 Ljubljana, Slovenia (Tax ID: SI37818716). We are the data controller for your personal data.

This Privacy Policy explains how we collect, use, and protect your information when you use ratemyfart.app (the "Service"). By using the Service, you agree to the practices described here.

2. Data We Collect

Account Data

When you sign in with Google OAuth, we receive your email address, display name, and profile picture. We store this to create and maintain your account.

Content Data

Audio recordings you upload, along with titles, descriptions, tags, and ratings you provide.

Technical Data

IP address and user agent string collected automatically via server logs. These logs are retained for 30 days.

Analytics Data

If you consent, Google Analytics collects page views, interactions, and device information. This data is only collected after you explicitly accept analytics cookies.

3. How We Use Your Data

  • Account management and authentication
  • Hosting and displaying your content
  • Audio analysis and categorization
  • Service improvement through analytics (with consent)
  • Security monitoring and abuse prevention

4. Legal Basis (GDPR Art. 6)

  • Consent — Analytics cookies and account creation via Google OAuth
  • Contract performance — Providing the Service to registered users
  • Legitimate interest — Security, abuse prevention, and server logs

5. Cookies

Functional Cookies (no consent required)

  • auth_token — Session authentication (7 days)
  • oauth_state — OAuth security token (10 minutes)
  • oauth_popup — OAuth flow state (10 minutes)
  • cookie_consent — Your cookie preference (1 year)

Analytics Cookies (consent required)

  • _ga — Google Analytics identifier (2 years)
  • _ga_* — Google Analytics session (1 year)

Analytics cookies are only set after you click "Accept" on our cookie consent banner.

6. Third-Party Services

  • Google OAuth — Authentication provider
  • Google Analytics — Usage analytics (with your consent)
  • Hetzner — Server hosting (Helsinki, EU)
  • Cloudflare — CDN and DNS

7. Data Retention

  • Account data — Until you delete your account
  • Recordings — Until you delete them
  • Server logs — 30 days
  • Analytics — Per Google Analytics retention settings

8. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Data portability
  • Restrict or object to processing
  • Withdraw consent at any time

To exercise these rights, contact us at hello@ratemyfart.app. We will respond within 30 days.

9. CCPA Rights

If you are a California resident, you have the right to:

  • Know what personal data we collect
  • Request deletion of your data
  • Opt out of the sale of personal data

We do not sell your personal data. Contact hello@ratemyfart.app to exercise your rights.

10. International Transfers

Your data is stored on servers in the EU (Hetzner, Helsinki). Some third-party processors (Google, Cloudflare) may process data in the United States under appropriate safeguards including Standard Contractual Clauses.

11. Children

RateMyFart is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes

We may update this Privacy Policy. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

For questions about this Privacy Policy or your data, contact us at hello@ratemyfart.app.