Privacy Policy
In short: Clozone does not ask for your name, email, phone number or contacts, and uses no tracking, no ads and no analytics. Other users never see who wrote something. Technically, however, Clozone is pseudonymous, not fully anonymous: your installation has a random identifier and your location is processed so the app can work.
1. Controller
Helmi Gourar, Liebigstraße 15a, 65439 Flörsheim am Main, Deutschland
Email: contact@clozone.app
2. Data we process
| Data | Purpose | Retention |
|---|---|---|
| Random installation identifier (pseudonymous account without email), stored securely on the device (iOS Keychain or Android Keystore) | Daily limits, abuse prevention, moderation, linking your own posts | Deleted after 90 days of inactivity; after “Delete my data” unusable immediately and permanently erased after 30 days |
| Text of your messages and replies, category, duration, reactions | Providing the service (publicly visible to people within 1 km for the duration you choose) | Up to 72 h after expiry; content you delete is hidden immediately and erased after 30 days; reported content until a decision, max. 30 days after expiry |
| Location when posting (rounded server-side to about 55 m) | Placing the message in its zone. Others only see a distance rounded to 50 m and a map point rounded to about 110 m | Same as the message |
| Current location when loading the feed | Showing messages within 1 km. Used for the request only, not stored | Not stored |
| “Online” presence (location rounded to about 110 m + time) | Showing how many people are nearby (only the number is shown) | 2 minutes at most |
| Reports (reason), blocks | Moderation, user protection | Reports up to 30 days after a decision; blocks until data deletion |
| Security events (no content, no location), limit counters | Protection against abuse and attacks | 2 to 30 days |
| IP address and technical connection data | Technical operation (hosting logs) | Depends on the host, usually a few days |
Clozone accesses your location only while the app is open and only with your permission. There is no background tracking. Without location access you cannot post or see the feed.
3. Legal bases
Art. 6(1)(b) GDPR (providing the service under the Terms of Use); Art. 6(1)(f) GDPR (legitimate interest in security, abuse prevention and moderation); Section 25(2) no. 2 TDDDG for strictly necessary storage on your device.
4. Recipients and service providers
- Supabase (database and authentication), servers in Frankfurt (EU), as processor. Supabase Inc. is based in the USA; transfers are covered by Standard Contractual Clauses.
- Map tiles: OpenStreetMap Foundation. When the map is shown (light and dark theme), your device loads tiles directly from this provider, which receives your IP address and the map area displayed.
- unpkg (via Cloudflare): delivers the Leaflet map library; receives your IP address.
- Apple (iPhone): operating-system location services and the App Store, under Apple's terms.
- Google (Android): location services of the operating system or Google Play services, and the Google Play Store, under Google's terms.
We do not sell data or share it for advertising.
Access for moderation: Authorised administrators (sign-in with password and two-factor authentication) can view, in order to moderate and handle reports: the text, category and dates of messages and replies, the author's pseudonymous installation identifier, the position saved at publication (rounded to about 55 m, never the exact GPS position) and the number of people who blocked an author (without seeing who). Every access to positions or blocks is recorded in an audit log (kept for 12 months; it contains identifiers, never coordinates). At an administrator's request, a message's rounded position can be opened in OpenStreetMap; OpenStreetMap then receives the administrator's IP address and the rounded coordinates, but not the message text. These accesses are not used to identify a person or to build a profile.
This website (clozone.app)
When you visit this website, our hosting provider Cloudflare (Cloudflare, Inc., USA; “Cloudflare Pages”) processes technically necessary connection data such as IP address, time, page requested and browser identifier in order to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework. This website itself sets no cookies, uses no analytics or tracking tools and loads no external fonts. If you email us, we process your address and message in order to reply (Art. 6(1)(b) or (f) GDPR); email provider: Zoho Mail (Zoho Corporation, Rechenzentrum in der EU). Correspondence is deleted once it is no longer needed.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR). Deletion: in the app under Settings → Privacy → “Delete my data” (immediately removes all your messages, replies and reactions from the app; messages, replies and your pseudonymous account are kept for 30 days for moderation, then permanently erased). For other requests write to contact@clozone.app. You may lodge a complaint with a data protection authority.
6. Minimum age
Clozone is intended for people aged 16 and over.
7. Changes
We update this policy when the app changes. The version published here applies.
Last updated: 26.10.2026